last executing test programs: 1.320250463s ago: executing program 1 (id=2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd}}, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5cc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x528, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4a0, 0x6, [@m_tunnel_key={0x13c, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xed, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795"}, {0xc}, {0xc}}}, @m_ife={0x94, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xbc, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @multicast1}}]}, {0x41, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3"}, {0xc}, {0xc}}}, @m_connmark={0x14c, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xc5, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba79cd0c5b4b2b956f87fa20fc312fee715e452bf7e80d855069f92b"}, {0xc}, {0xc}}}, @m_bpf={0x8c, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}]}, {0x3e, 0x6, "538ccaa56078deef000966568338f89ce81cefabfec7b5ecddcf6ec4c8f36b3d56cee56f03867d370c75d6c9145563ce90406a22849d66b56f24"}, {0xc}, {0xc}}}, @m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x5cc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.140914314s ago: executing program 1 (id=6): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x582b7cad97fe5754, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x100}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) 1.076647149s ago: executing program 1 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) 978.855645ms ago: executing program 3 (id=4): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x1, 0x155, &(0x7f0000000900)="$eJzs0M9KAlEUx/HfdfwzlKaRgQX9gTaSmOMMtmuRkSRkA4WbVoJOFGhKQrQrg3YtegAXgdBKXETLFmVtrBkIe4IeQGjRA8T1DpVUb3A+G/F7zhyGWV2ywghA0SCslEuVY6NaNQqzm3omtXV9czvCuweA3N8oVQ4kAAWxf7cM7PJfJ9CrifzgA3b2isZCvlzk/x327eQw7y4oELtDvAXFbtxu4TmgPS6a+kfTgBRqwKSTIekXTcYPo9/3PgAc1SOt5tOG2UlH56+mJJylIzNjbLBPG+dqaqLhDUnIGo9vSPI5XmOd6Eus1exaZmZdz+iWpqqLmhJXlERXfzbTiZMLONe8h8D21z0J/J7bDSALnDKgzoBmf967Zz4ZaPPP4fcE+bvuBwAmJgDal7Je8nv4w+/2JJ8LuRq5YMABKQyGQexXIYQQQgghhBBC/vEZAAD//+mTYBY=") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 975.817495ms ago: executing program 0 (id=1): r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x3, 0xbb8, &(0x7f00000017c0)="$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") r1 = epoll_create1(0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000002100)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x200f}) 932.442368ms ago: executing program 1 (id=8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000001c80)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x18, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 780.837504ms ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 715.438249ms ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000086c0), 0x1, 0x4c8c5) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x1}) 632.775548ms ago: executing program 2 (id=10): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x87, 0xa7, 0x0, 0x40, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x17, 0x0, 0x2, 0x44, 0xb1, 0xb6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfe}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 267.570621ms ago: executing program 3 (id=11): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc1918, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x20000000, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x9, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x8, 0xfe000000, 0xfffb, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x7fffffff, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x82, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xe2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0xb, 0x6, 0x1c, 0x120000, 0x3, 0x4, 0xaaf0, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa624, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x6cc, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1c, 0x4, 0x200, 0xffff3441, 0xffe]}, 0x45c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = fanotify_init(0x0, 0x0) writev(r1, &(0x7f0000000500)=[{0x0}], 0x1) 220.837912ms ago: executing program 3 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 21.125634ms ago: executing program 2 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 0 (id=14): unshare(0x60480) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r0, 0x0) r1 = syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 31.363626][ T6456] cgroup: Unknown subsys name 'net' [ 31.621525][ T6456] cgroup: Unknown subsys name 'cpuset' [ 31.625458][ T6456] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.989384][ T6456] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.015106][ T6476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.015307][ T6038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.021830][ T6038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.024032][ T6038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.026397][ T6038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.028646][ T6038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.029427][ T6476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.033304][ T6476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.039130][ T6476] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.043995][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.046264][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.052312][ T6476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.054816][ T6476] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.055266][ T6479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.059956][ T6479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.061697][ T6476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.062277][ T6479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.063819][ T6476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.066368][ T6479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.069852][ T6479] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.072045][ T6479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.074422][ T6479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.075222][ T6475] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.078416][ T6475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.115447][ T6471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.118997][ T6471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.122321][ T6471] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.125659][ T6471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.127953][ T6471] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.130600][ T6471] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.319057][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 35.376758][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 35.382822][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 35.392351][ T6480] chnl_net:caif_netlink_parms(): no params data found [ 35.415093][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.416987][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.418864][ T6477] bridge_slave_0: entered allmulticast mode [ 35.421055][ T6477] bridge_slave_0: entered promiscuous mode [ 35.437778][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.439734][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.441597][ T6477] bridge_slave_1: entered allmulticast mode [ 35.443604][ T6477] bridge_slave_1: entered promiscuous mode [ 35.513731][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.516169][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.518029][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.520355][ T6470] bridge_slave_0: entered allmulticast mode [ 35.522433][ T6470] bridge_slave_0: entered promiscuous mode [ 35.531806][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.533648][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.535626][ T6468] bridge_slave_0: entered allmulticast mode [ 35.539491][ T6468] bridge_slave_0: entered promiscuous mode [ 35.543062][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.545517][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.547405][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.549494][ T6468] bridge_slave_1: entered allmulticast mode [ 35.551509][ T6468] bridge_slave_1: entered promiscuous mode [ 35.553909][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.555760][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.557636][ T6470] bridge_slave_1: entered allmulticast mode [ 35.563358][ T6470] bridge_slave_1: entered promiscuous mode [ 35.604979][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.606904][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.608841][ T6480] bridge_slave_0: entered allmulticast mode [ 35.611213][ T6480] bridge_slave_0: entered promiscuous mode [ 35.615072][ T6477] team0: Port device team_slave_0 added [ 35.617115][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.618970][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.621694][ T6480] bridge_slave_1: entered allmulticast mode [ 35.623691][ T6480] bridge_slave_1: entered promiscuous mode [ 35.631501][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.634013][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 35.638689][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.642484][ T6477] team0: Port device team_slave_1 added [ 35.650567][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.670092][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.674096][ T6480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.692604][ T6480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.707536][ T6470] team0: Port device team_slave_0 added [ 35.710686][ T6470] team0: Port device team_slave_1 added [ 35.712631][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.714594][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.721568][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.730514][ T6468] team0: Port device team_slave_0 added [ 35.748495][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.750642][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.757446][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.771436][ T6480] team0: Port device team_slave_0 added [ 35.774207][ T6468] team0: Port device team_slave_1 added [ 35.777396][ T6480] team0: Port device team_slave_1 added [ 35.786331][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.788157][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.795435][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.799425][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.801244][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.807954][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.846033][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.847982][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.859067][ T6480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.863756][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.865568][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.873337][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.885295][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.887229][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.889146][ T6483] bridge_slave_0: entered allmulticast mode [ 35.891522][ T6483] bridge_slave_0: entered promiscuous mode [ 35.896383][ T6477] hsr_slave_0: entered promiscuous mode [ 35.898494][ T6477] hsr_slave_1: entered promiscuous mode [ 35.901473][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.903266][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.910047][ T6480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.913496][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.915433][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.922478][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.938292][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.940364][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.942309][ T6483] bridge_slave_1: entered allmulticast mode [ 35.944338][ T6483] bridge_slave_1: entered promiscuous mode [ 35.968368][ T6470] hsr_slave_0: entered promiscuous mode [ 35.970655][ T6470] hsr_slave_1: entered promiscuous mode [ 35.972460][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.974551][ T6470] Cannot create hsr debugfs directory [ 35.977890][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.981964][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.006136][ T6468] hsr_slave_0: entered promiscuous mode [ 36.008050][ T6468] hsr_slave_1: entered promiscuous mode [ 36.010364][ T6468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.012390][ T6468] Cannot create hsr debugfs directory [ 36.047917][ T6483] team0: Port device team_slave_0 added [ 36.056711][ T6480] hsr_slave_0: entered promiscuous mode [ 36.058668][ T6480] hsr_slave_1: entered promiscuous mode [ 36.060987][ T6480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.063039][ T6480] Cannot create hsr debugfs directory [ 36.076031][ T6483] team0: Port device team_slave_1 added [ 36.115933][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.117800][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.125514][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.150154][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.151991][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.158662][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.213945][ T6483] hsr_slave_0: entered promiscuous mode [ 36.216091][ T6483] hsr_slave_1: entered promiscuous mode [ 36.217928][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.220917][ T6483] Cannot create hsr debugfs directory [ 36.293122][ T6477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.299082][ T6477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.306478][ T6477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.318105][ T6477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.355886][ T6468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.360427][ T6468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.366073][ T6468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.378576][ T6468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.431575][ T6470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.435659][ T6470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.443641][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.448166][ T6470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.452779][ T6470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.484532][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.493285][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.495308][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.498781][ T6480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.504326][ T6480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.507988][ T6480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.513436][ T6480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.546142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.548054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.557677][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.570466][ T6483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.574425][ T6483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.577895][ T6483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.599869][ T6483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.619146][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.628172][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.648863][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.659052][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.661150][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.694648][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.696618][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.701928][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.703784][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.707131][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.708974][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.742687][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.757134][ T6470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.761572][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.777725][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.798250][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.845094][ T6480] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.865830][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.867807][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.872808][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.874778][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.884919][ T6477] veth0_vlan: entered promiscuous mode [ 36.893482][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.896676][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.907926][ T6477] veth1_vlan: entered promiscuous mode [ 36.914111][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.918471][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.920482][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.925033][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.927035][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.968046][ T6477] veth0_macvtap: entered promiscuous mode [ 36.981117][ T6477] veth1_macvtap: entered promiscuous mode [ 37.011026][ T6470] veth0_vlan: entered promiscuous mode [ 37.034209][ T6468] veth0_vlan: entered promiscuous mode [ 37.045725][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.049104][ T6470] veth1_vlan: entered promiscuous mode [ 37.057167][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.067344][ T6477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.070578][ T6477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.073242][ T6477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.075552][ T6477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.081198][ T6468] veth1_vlan: entered promiscuous mode [ 37.114720][ T6470] veth0_macvtap: entered promiscuous mode [ 37.118541][ T6470] veth1_macvtap: entered promiscuous mode [ 37.129533][ T6479] Bluetooth: hci0: command tx timeout [ 37.130101][ T6471] Bluetooth: hci1: command tx timeout [ 37.131292][ T6479] Bluetooth: hci2: command tx timeout [ 37.132836][ T6471] Bluetooth: hci3: command tx timeout [ 37.148439][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.159075][ T6468] veth0_macvtap: entered promiscuous mode [ 37.183712][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.186526][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.198310][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.206565][ T6480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.209599][ T6471] Bluetooth: hci4: command tx timeout [ 37.215982][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.218710][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.222499][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.224690][ T6468] veth1_macvtap: entered promiscuous mode [ 37.228114][ T6470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.231584][ T6470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.233959][ T6470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.236279][ T6470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.294914][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.297129][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.304012][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.306832][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.310453][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.313143][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.316490][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.345457][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.348320][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.352509][ T6468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.355363][ T6468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.358502][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.364810][ T6480] veth0_vlan: entered promiscuous mode [ 37.371927][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.373972][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.381429][ T6480] veth1_vlan: entered promiscuous mode [ 37.384594][ T6468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.386943][ T6468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.390136][ T6468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.392433][ T6468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.433378][ T6483] veth0_vlan: entered promiscuous mode [ 37.435970][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.438026][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.463589][ T6477] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.474534][ T6483] veth1_vlan: entered promiscuous mode [ 37.480858][ T6480] veth0_macvtap: entered promiscuous mode [ 37.486613][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.488836][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.497531][ T6480] veth1_macvtap: entered promiscuous mode [ 37.540005][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.542154][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.551793][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.553894][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.554508][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.558588][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.562300][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.565159][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.567819][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.570999][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.574451][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.585799][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.588540][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.593517][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.596437][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.599047][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.604105][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.607379][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.629728][ T6480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632235][ T6480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.634562][ T6480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.636915][ T6480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.650978][ T6483] veth0_macvtap: entered promiscuous mode [ 37.660880][ T6483] veth1_macvtap: entered promiscuous mode [ 37.681350][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.684181][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.686767][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.701986][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.704694][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.707470][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.713539][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.716458][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.720193][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.723547][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.726337][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.728908][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.732245][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.734819][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.737594][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.740818][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.743696][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.756675][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.788093][ T6483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.791565][ T6560] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 37.796247][ T6483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.798589][ T6483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.801259][ T6483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.807270][ T275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.810259][ T6560] syz_tun: entered promiscuous mode [ 37.812503][ T275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.819839][ T6560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.871076][ T6562] loop3: detected capacity change from 0 to 8 [ 37.873184][ T6562] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 37.915865][ T6562] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 37.918456][ T6562] cramfs: Error -3 while decompressing! [ 37.931381][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.933428][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.934726][ T6562] cramfs: 00000000261d3b75(26)->000000003be7ac80(4096) [ 37.946657][ T6562] cramfs: Error -5 while decompressing! [ 37.963291][ T6562] cramfs: 000000003484c311(26)->00000000b2fed6dc(4096) [ 37.965181][ T6562] cramfs: Error -3 while decompressing! [ 37.966654][ T6562] cramfs: 00000000261d3b75(26)->000000003be7ac80(4096) [ 37.984874][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.987070][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.020891][ T6564] loop0: detected capacity change from 0 to 4096 [ 38.040255][ T6564] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 38.245074][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.254880][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.813929][ T6566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 38.824451][ T6566] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 39.145884][ T6566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 39.153000][ T6566] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 39.199311][ C1] ------------[ cut here ]------------ [ 39.201087][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 39.203000][ C1] WARNING: CPU: 1 PID: 6623 at kernel/workqueue.c:2258 __queue_work+0xe94/0x1324 [ 39.205570][ C1] Modules linked in: [ 39.206643][ C1] CPU: 1 UID: 0 PID: 6623 Comm: syz.2.13 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0 [ 39.209332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.212130][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 39.214321][ C1] pc : __queue_work+0xe94/0x1324 [ 39.215716][ C1] lr : __queue_work+0xe94/0x1324 [ 39.217121][ C1] sp : ffff800080017b40 [ 39.218245][ C1] x29: ffff800080017b90 x28: dfff800000000000 x27: ffff700010002f88 [ 39.220535][ C1] x26: ffff80008fd3d608 x25: ffff0000dc3b4000 x24: 0000000000000008 [ 39.222699][ C1] x23: ffff0000dc3b41c0 x22: 0000000000000100 x21: 1fffe0001b876838 [ 39.224893][ C1] x20: ffff8000931af000 x19: ffff0000eb370948 x18: 0000000000000008 [ 39.227071][ C1] x17: 0000000000000000 x16: ffff8000832b867c x15: 0000000000000001 [ 39.229336][ C1] x14: 1fffe000366ebaf2 x13: 0000000000000000 x12: 0000000000000000 [ 39.231491][ C1] x11: 0000000000000103 x10: 0000000000ff0100 x9 : c1f0e34690712600 [ 39.233662][ C1] x8 : c1f0e34690712600 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.235848][ C1] x5 : ffff8000800172f8 x4 : ffff80008fe2fb00 x3 : ffff800080744ed0 [ 39.238003][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 39.240181][ C1] Call trace: [ 39.241098][ C1] __queue_work+0xe94/0x1324 (P) [ 39.242410][ C1] delayed_work_timer_fn+0x74/0x90 [ 39.243880][ C1] call_timer_fn+0x1b4/0x8b8 [ 39.245096][ C1] __run_timer_base+0x59c/0x7b4 [ 39.246456][ C1] run_timer_softirq+0xcc/0x194 [ 39.247776][ C1] handle_softirqs+0x320/0xd34 [ 39.249094][ C1] __do_softirq+0x14/0x20 [ 39.250227][ C1] ____do_softirq+0x14/0x20 [ 39.251431][ C1] call_on_irq_stack+0x24/0x4c [ 39.252735][ C1] do_softirq_own_stack+0x20/0x2c [ 39.254104][ C1] __irq_exit_rcu+0x1d8/0x544 [ 39.255340][ C1] irq_exit_rcu+0x14/0x84 [ 39.256492][ C1] el1_interrupt+0x38/0x68 [ 39.257660][ C1] el1h_64_irq_handler+0x18/0x24 [ 39.259034][ C1] el1h_64_irq+0x6c/0x70 [ 39.260175][ C1] __rcu_read_lock+0x0/0x104 (P) [ 39.261515][ C1] smack_privileged+0x8c/0xd0 [ 39.262803][ C1] smack_unix_may_send+0x1fc/0x2d0 [ 39.264174][ C1] security_unix_may_send+0xd4/0x2c0 [ 39.265626][ C1] unix_dgram_sendmsg+0x8cc/0x16dc [ 39.267000][ C1] ____sys_sendmsg+0x570/0x87c [ 39.268273][ C1] __sys_sendmmsg+0x2fc/0x76c [ 39.269484][ C1] __arm64_sys_sendmmsg+0xa0/0xbc [ 39.270844][ C1] invoke_syscall+0x98/0x2b8 [ 39.272070][ C1] el0_svc_common+0x130/0x23c [ 39.273424][ C1] do_el0_svc+0x48/0x58 [ 39.274562][ C1] el0_svc+0x54/0x168 [ 39.275610][ C1] el0t_64_sync_handler+0x84/0x108 [ 39.277001][ C1] el0t_64_sync+0x198/0x19c [ 39.278290][ C1] irq event stamp: 52155 [ 39.279418][ C1] hardirqs last enabled at (52154): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 39.282262][ C1] hardirqs last disabled at (52155): [] _raw_spin_lock_irq+0x28/0x70 [ 39.284771][ C1] softirqs last enabled at (50908): [] handle_softirqs+0xb44/0xd34 [ 39.287318][ C1] softirqs last disabled at (52141): [] __do_softirq+0x14/0x20 [ 39.289733][ C1] ---[ end trace 0000000000000000 ]--- [ 39.291365][ C1] vkms_vblank_simulate: vblank timer overrun [ 39.294395][ T6471] Bluetooth: hci3: command tx timeout [ 39.296699][ T6471] Bluetooth: hci2: command tx timeout [ 39.300385][ T6471] Bluetooth: hci4: command tx timeout [ 41.359620][ T6038] Bluetooth: hci4: command tx timeout [ 41.361177][ T6038] Bluetooth: hci2: command tx timeout [ 41.362687][ T6038] Bluetooth: hci3: command tx timeout [ 43.439375][ T6471] Bluetooth: hci3: command tx timeout [ 43.441067][ T6038] Bluetooth: hci2: command tx timeout [ 43.442470][ T6038] Bluetooth: hci4: command tx timeout