last executing test programs: 823.556848ms ago: executing program 4 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000004f00)=ANY=[], 0x12f4}}, 0x4) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000ac0)=""/215, 0xd7}], 0x2}, 0xfffffffd}], 0x2, 0x40010100, 0x0) 823.430643ms ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 823.384148ms ago: executing program 3 (id=4): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 759.273389ms ago: executing program 3 (id=18): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 667.922285ms ago: executing program 1 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x10, 0xb3, 0x0, 0x3, [0x2, 0x0, 0x9]}, @rr={0x7, 0xb, 0xaa, [@multicast2, @local]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 649.667658ms ago: executing program 4 (id=22): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 528.018376ms ago: executing program 1 (id=23): syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @loopback, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @enc_lim={0x4, 0x1, 0xc}]}]}}}}}, 0x0) 527.877059ms ago: executing program 0 (id=24): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 492.281667ms ago: executing program 1 (id=26): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe26, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}}, 0x40044) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5c840}, 0x2000c005) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 416.024626ms ago: executing program 0 (id=28): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) 415.870534ms ago: executing program 2 (id=29): socket$inet6(0xa, 0x2, 0x100) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0403220c01"], 0x7) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 341.79054ms ago: executing program 0 (id=30): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 325.830294ms ago: executing program 2 (id=31): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x200418cc) 212.067321ms ago: executing program 0 (id=32): r0 = fanotify_init(0x10, 0x1) fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0) 211.884437ms ago: executing program 2 (id=33): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 195.503632ms ago: executing program 0 (id=34): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="3900000013000347004739c7ea2a70f02e000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 148.381612ms ago: executing program 2 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 67.894703ms ago: executing program 2 (id=36): r0 = socket$inet6(0xa, 0x6, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 67.750428ms ago: executing program 0 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) 50.571826ms ago: executing program 4 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x280b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)="893c581a"}) 0s ago: executing program 2 (id=39): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts. [ 33.330491][ T6417] cgroup: Unknown subsys name 'net' [ 33.588361][ T6417] cgroup: Unknown subsys name 'cpuset' [ 33.591939][ T6417] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.964896][ T6417] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.279127][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.281510][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.283247][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.285125][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.287698][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.289269][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.387941][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.389869][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.391513][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.393388][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.395175][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.402975][ T6428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.406389][ T6428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.419762][ T6428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.422064][ T6428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.428054][ T6438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.430035][ T6438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.432331][ T6441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.432467][ T6438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.435448][ T6441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.435448][ T6438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.438819][ T6438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.440911][ T6438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.442839][ T6438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.444529][ T6438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.446041][ T6438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.448390][ T6445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.462843][ T6441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.464783][ T6441] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.466706][ T6441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.615069][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 35.701123][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 35.737446][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.738863][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.740335][ T6427] bridge_slave_0: entered allmulticast mode [ 35.742162][ T6427] bridge_slave_0: entered promiscuous mode [ 35.745970][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.747599][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.749060][ T6427] bridge_slave_1: entered allmulticast mode [ 35.750677][ T6427] bridge_slave_1: entered promiscuous mode [ 35.752697][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 35.762648][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 35.799814][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.805467][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.811339][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.812742][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.814162][ T6434] bridge_slave_0: entered allmulticast mode [ 35.815823][ T6434] bridge_slave_0: entered promiscuous mode [ 35.846235][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.847973][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.849427][ T6434] bridge_slave_1: entered allmulticast mode [ 35.851057][ T6434] bridge_slave_1: entered promiscuous mode [ 35.860876][ T6427] team0: Port device team_slave_0 added [ 35.870928][ T6427] team0: Port device team_slave_1 added [ 35.903058][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 35.913526][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.914955][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.920258][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.927992][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.929449][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.930827][ T6442] bridge_slave_0: entered allmulticast mode [ 35.932467][ T6442] bridge_slave_0: entered promiscuous mode [ 35.935811][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.947123][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.948498][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.949946][ T6440] bridge_slave_0: entered allmulticast mode [ 35.951624][ T6440] bridge_slave_0: entered promiscuous mode [ 35.953865][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.955298][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.961444][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.966450][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.968046][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.969611][ T6442] bridge_slave_1: entered allmulticast mode [ 35.971234][ T6442] bridge_slave_1: entered promiscuous mode [ 35.973767][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.981595][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.982919][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.984404][ T6440] bridge_slave_1: entered allmulticast mode [ 35.985995][ T6440] bridge_slave_1: entered promiscuous mode [ 35.999467][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.022524][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.030058][ T6434] team0: Port device team_slave_0 added [ 36.056640][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.098271][ T6427] hsr_slave_0: entered promiscuous mode [ 36.146816][ T6427] hsr_slave_1: entered promiscuous mode [ 36.213139][ T6434] team0: Port device team_slave_1 added [ 36.219498][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.222421][ T6442] team0: Port device team_slave_0 added [ 36.232294][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.233680][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.234991][ T6437] bridge_slave_0: entered allmulticast mode [ 36.236902][ T6437] bridge_slave_0: entered promiscuous mode [ 36.252607][ T6442] team0: Port device team_slave_1 added [ 36.255200][ T6440] team0: Port device team_slave_0 added [ 36.261133][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.262637][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.264081][ T6437] bridge_slave_1: entered allmulticast mode [ 36.265791][ T6437] bridge_slave_1: entered promiscuous mode [ 36.276977][ T6440] team0: Port device team_slave_1 added [ 36.284329][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.285780][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.291195][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.314529][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.315872][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.321205][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.324307][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.325669][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.331067][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.345771][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.350320][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.351706][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.357255][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.360241][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.361584][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.371169][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.377168][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.382160][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.383567][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.388825][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.448249][ T6434] hsr_slave_0: entered promiscuous mode [ 36.496965][ T6434] hsr_slave_1: entered promiscuous mode [ 36.566861][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.568525][ T6434] Cannot create hsr debugfs directory [ 36.574333][ T6437] team0: Port device team_slave_0 added [ 36.577348][ T6437] team0: Port device team_slave_1 added [ 36.678258][ T6442] hsr_slave_0: entered promiscuous mode [ 36.726885][ T6442] hsr_slave_1: entered promiscuous mode [ 36.766710][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.768298][ T6442] Cannot create hsr debugfs directory [ 36.772568][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.773941][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.779678][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.782931][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.784371][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.789698][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.848310][ T6440] hsr_slave_0: entered promiscuous mode [ 36.886929][ T6440] hsr_slave_1: entered promiscuous mode [ 36.926573][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.928231][ T6440] Cannot create hsr debugfs directory [ 37.008189][ T6437] hsr_slave_0: entered promiscuous mode [ 37.047200][ T6437] hsr_slave_1: entered promiscuous mode [ 37.086601][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.088173][ T6437] Cannot create hsr debugfs directory [ 37.200646][ T6427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.212964][ T6427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.216072][ T6427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.233158][ T6427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.260716][ T6442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.263476][ T6442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.267651][ T6442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.282949][ T6442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.297063][ T6441] Bluetooth: hci0: command tx timeout [ 37.313924][ T6434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.317415][ T6434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.327423][ T6434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.346698][ T6434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.362362][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.390349][ T6437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.401664][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.404712][ T6437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.408520][ T6437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.417108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.418611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.422925][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.424418][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.429827][ T6437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.456669][ T5991] Bluetooth: hci1: command tx timeout [ 37.458187][ T6441] Bluetooth: hci2: command tx timeout [ 37.466317][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.468196][ T6441] Bluetooth: hci4: command tx timeout [ 37.484042][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.487300][ T6440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.490237][ T6440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.493018][ T6440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.506121][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.507614][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.511454][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.512883][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.517932][ T6440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.546735][ T6441] Bluetooth: hci3: command tx timeout [ 37.559925][ T6442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.562009][ T6442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.595905][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.602692][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.634018][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.639539][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.652232][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.653608][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.655815][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.657255][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.672336][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.673793][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.683174][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.685665][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.687091][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.710618][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.732488][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.738031][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.743476][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.744898][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.748364][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.749741][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.795191][ T6437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.797970][ T6437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.804842][ T6442] veth0_vlan: entered promiscuous mode [ 37.858821][ T6442] veth1_vlan: entered promiscuous mode [ 37.909025][ T6442] veth0_macvtap: entered promiscuous mode [ 37.911826][ T6442] veth1_macvtap: entered promiscuous mode [ 37.938911][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.942822][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.945760][ T6442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.949765][ T6442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.951573][ T6442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.953388][ T6442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.980874][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.991175][ T6427] veth0_vlan: entered promiscuous mode [ 37.999279][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.007402][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.029054][ T6427] veth1_vlan: entered promiscuous mode [ 38.069045][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.070766][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.079883][ T6437] veth0_vlan: entered promiscuous mode [ 38.086362][ T6437] veth1_vlan: entered promiscuous mode [ 38.101823][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.103430][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.113836][ T6440] veth0_vlan: entered promiscuous mode [ 38.130901][ T6434] veth0_vlan: entered promiscuous mode [ 38.135487][ T6437] veth0_macvtap: entered promiscuous mode [ 38.143672][ T6437] veth1_macvtap: entered promiscuous mode [ 38.151622][ T6427] veth0_macvtap: entered promiscuous mode [ 38.153617][ T6434] veth1_vlan: entered promiscuous mode [ 38.161301][ T6427] veth1_macvtap: entered promiscuous mode [ 38.165124][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.168004][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.171520][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.180417][ T6440] veth1_vlan: entered promiscuous mode [ 38.182427][ T6442] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.190125][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.192180][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.194952][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.201154][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.203144][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.205038][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.208902][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.212382][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.215357][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.222453][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.224375][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.237400][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.239997][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.279832][ T6437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.281648][ T6437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.283258][ T6437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.284936][ T6437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.294705][ T6487] IPVS: starting estimator thread 0... [ 38.294964][ T6427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.300736][ T6427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.302467][ T6427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.304120][ T6427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.314040][ T6440] veth0_macvtap: entered promiscuous mode [ 38.342591][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.350093][ T6434] veth0_macvtap: entered promiscuous mode [ 38.360083][ T6434] veth1_macvtap: entered promiscuous mode [ 38.363214][ T6440] veth1_macvtap: entered promiscuous mode [ 38.379857][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.381873][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.383801][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.385698][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.389929][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.392084][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.394903][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.396798][ T6511] IPVS: using max 26 ests per chain, 62400 per kthread [ 38.428425][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.430580][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.432456][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.434458][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.436390][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.438956][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.440946][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.442952][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.445819][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.449243][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.451299][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.453186][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.455112][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.460596][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.462646][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.465540][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.488661][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.490764][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.492851][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.495024][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.497746][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.499886][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.502182][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.504276][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.515748][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.520302][ T6440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.522151][ T6440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.523828][ T6440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.525438][ T6440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.535063][ T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.538063][ T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.557777][ T6434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.559525][ T6434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561251][ T6434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.562856][ T6434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.629525][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.631178][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.653705][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.655200][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.683904][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.685422][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.744855][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.756917][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.799501][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.799733][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.801019][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.808272][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.860844][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.862426][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.069830][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.154679][ T6553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 39.155984][ T6553] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 39.180925][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 39.190215][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.192198][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.318249][ T6553] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 39.319420][ T6553] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 39.341621][ T6574] tipc: Started in network mode [ 39.342823][ T6574] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711 [ 39.345252][ T6574] tipc: Enabled bearer , priority 10 [ 39.487518][ T6584] Zero length message leads to an empty skb [ 39.510021][ T6553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 39.511224][ T6553] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 39.536735][ T6441] Bluetooth: hci4: command tx timeout [ 39.642867][ T6592] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 39.686461][ T6592] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 39.747655][ T6553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 39.749404][ T6553] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 39.840226][ T6602] binder: 6601:6602 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.843120][ T6602] binder: 6602 RLIMIT_NICE not set [ 39.844791][ T1764] ================================================================== [ 39.846506][ T1764] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x34/0x158 [ 39.848320][ T1764] Read of size 8 at addr ffff0000c5f6f988 by task kworker/1:2/1764 [ 39.849831][ T1764] [ 39.850301][ T1764] CPU: 1 UID: 0 PID: 1764 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 39.852220][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.854174][ T1764] Workqueue: events binder_deferred_func [ 39.855267][ T1764] Call trace: [ 39.855900][ T1764] show_stack+0x2c/0x3c (C) [ 39.856828][ T1764] dump_stack_lvl+0xe4/0x150 [ 39.857710][ T1764] print_report+0x198/0x538 [ 39.858592][ T1764] kasan_report+0xd8/0x138 [ 39.859468][ T1764] __asan_report_load8_noabort+0x20/0x2c [ 39.860584][ T1764] __list_del_entry_valid_or_report+0x34/0x158 [ 39.861805][ T1764] binder_release_work+0xc0/0x4f4 [ 39.862807][ T1764] binder_deferred_func+0x109c/0x1270 [ 39.863871][ T1764] process_one_work+0x7bc/0x1600 [ 39.864782][ T1764] worker_thread+0x97c/0xeec [ 39.865695][ T1764] kthread+0x288/0x310 [ 39.866531][ T1764] ret_from_fork+0x10/0x20 [ 39.867385][ T1764] [ 39.867822][ T1764] Allocated by task 6602: [ 39.868726][ T1764] kasan_save_track+0x40/0x78 [ 39.869640][ T1764] kasan_save_alloc_info+0x40/0x50 [ 39.870653][ T1764] __kasan_kmalloc+0xac/0xc4 [ 39.871557][ T1764] __kmalloc_cache_noprof+0x244/0x378 [ 39.872611][ T1764] binder_ioctl_write_read+0x1e94/0xb0d8 [ 39.873681][ T1764] binder_ioctl+0x408/0x2670 [ 39.874565][ T1764] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.875537][ T1764] invoke_syscall+0x98/0x2b8 [ 39.876472][ T1764] el0_svc_common+0x130/0x23c [ 39.877388][ T1764] do_el0_svc+0x48/0x58 [ 39.878194][ T1764] el0_svc+0x54/0x168 [ 39.878920][ T1764] el0t_64_sync_handler+0x84/0x108 [ 39.879926][ T1764] el0t_64_sync+0x198/0x19c [ 39.880817][ T1764] [ 39.881340][ T1764] Freed by task 1764: [ 39.882120][ T1764] kasan_save_track+0x40/0x78 [ 39.883000][ T1764] kasan_save_free_info+0x54/0x6c [ 39.884021][ T1764] __kasan_slab_free+0x64/0x8c [ 39.884983][ T1764] kfree+0x184/0x47c [ 39.885848][ T1764] binder_deferred_func+0xff0/0x1270 [ 39.886904][ T1764] process_one_work+0x7bc/0x1600 [ 39.887883][ T1764] worker_thread+0x97c/0xeec [ 39.888788][ T1764] kthread+0x288/0x310 [ 39.889672][ T1764] ret_from_fork+0x10/0x20 [ 39.890577][ T1764] [ 39.891039][ T1764] The buggy address belongs to the object at ffff0000c5f6f980 [ 39.891039][ T1764] which belongs to the cache kmalloc-64 of size 64 [ 39.893954][ T1764] The buggy address is located 8 bytes inside of [ 39.893954][ T1764] freed 64-byte region [ffff0000c5f6f980, ffff0000c5f6f9c0) [ 39.896967][ T1764] [ 39.897433][ T1764] The buggy address belongs to the physical page: [ 39.898720][ T1764] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105f6f [ 39.900600][ T1764] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 39.902105][ T1764] page_type: f5(slab) [ 39.902890][ T1764] raw: 05ffc00000000000 ffff0000c00018c0 fffffdffc35dfcc0 dead000000000006 [ 39.904736][ T1764] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 39.906615][ T1764] page dumped because: kasan: bad access detected [ 39.907905][ T1764] [ 39.908410][ T1764] Memory state around the buggy address: [ 39.909590][ T1764] ffff0000c5f6f880: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 39.911254][ T1764] ffff0000c5f6f900: 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc fc [ 39.912922][ T1764] >ffff0000c5f6f980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.914515][ T1764] ^ [ 39.915332][ T1764] ffff0000c5f6fa00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.917072][ T1764] ffff0000c5f6fa80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.918751][ T1764] ================================================================== [ 39.920825][ T1764] Disabling lock debugging due to kernel taint [ 39.922067][ T1764] Unable to handle kernel paging request at virtual address e0e3c07ba00000dc [ 39.923723][ T1764] KASAN: maybe wild-memory-access in range [0x072203dd000006e0-0x072203dd000006e7] [ 39.925571][ T1764] Mem abort info: [ 39.926229][ T1764] ESR = 0x0000000096000004 [ 39.927471][ T1764] EC = 0x25: DABT (current EL), IL = 32 bits [ 39.928832][ T1764] SET = 0, FnV = 0 [ 39.929565][ T1764] EA = 0, S1PTW = 0 [ 39.930479][ T1764] FSC = 0x04: level 0 translation fault [ 39.931673][ T1764] Data abort info: [ 39.932415][ T1764] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 39.933579][ T1764] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 39.934823][ T1764] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 39.936089][ T1764] [e0e3c07ba00000dc] address between user and kernel address ranges [ 39.937979][ T1764] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 39.939361][ T1764] Modules linked in: [ 39.940032][ T1764] CPU: 1 UID: 0 PID: 1764 Comm: kworker/1:2 Tainted: G B 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 39.942528][ T1764] Tainted: [B]=BAD_PAGE [ 39.943388][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.945422][ T1764] Workqueue: events binder_deferred_func [ 39.946633][ T1764] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 39.948222][ T1764] pc : __list_del_entry_valid_or_report+0x78/0x158 [ 39.949567][ T1764] lr : __list_del_entry_valid_or_report+0x4c/0x158 [ 39.950847][ T1764] sp : ffff8000a02a79c0 [ 39.951714][ T1764] x29: ffff8000a02a79c0 x28: ffff700014054f80 x27: ffff0000c5f6f980 [ 39.953406][ T1764] x26: dfff800000000000 x25: ffff8000922b00a0 x24: ffff80008f154f3b [ 39.955039][ T1764] x23: ffff80008f154f16 x22: dfff800000000000 x21: 072203dd000006e4 [ 39.956664][ T1764] x20: ffff0000d875c700 x19: ffff0000c5f6f980 x18: 0000000000000008 [ 39.958279][ T1764] x17: 0000000000000000 x16: ffff80008b47f65c x15: 0000000000000001 [ 39.959881][ T1764] x14: 1ffff000125bc2e8 x13: 0000000000000000 x12: 0000000000000000 [ 39.961509][ T1764] x11: ffff7000125bc2e9 x10: 0000000000ff0100 x9 : ffff80009746b3a0 [ 39.963220][ T1764] x8 : 00e4407ba00000dc x7 : 0000000000000001 x6 : 0000000000000001 [ 39.964892][ T1764] x5 : ffff8000a02a6ff8 x4 : ffff80008f9bd220 x3 : ffff800083161924 [ 39.966627][ T1764] x2 : dead000000000122 x1 : 0000000000000008 x0 : 0000000000000000 [ 39.968333][ T1764] Call trace: [ 39.969004][ T1764] __list_del_entry_valid_or_report+0x78/0x158 (P) [ 39.970304][ T1764] __list_del_entry_valid_or_report+0x4c/0x158 (L) [ 39.971718][ T1764] binder_release_work+0xc0/0x4f4 [ 39.972815][ T1764] binder_deferred_func+0x109c/0x1270 [ 39.973914][ T1764] process_one_work+0x7bc/0x1600 [ 39.974895][ T1764] worker_thread+0x97c/0xeec [ 39.975817][ T1764] kthread+0x288/0x310 [ 39.976676][ T1764] ret_from_fork+0x10/0x20 [ 39.977641][ T1764] Code: 91008902 eb0202bf 54000520 d343fea8 (38766908) [ 39.979147][ T1764] ---[ end trace 0000000000000000 ]--- [ 40.474654][ T1764] Kernel panic - not syncing: Oops: Fatal exception [ 40.475907][ T1764] SMP: stopping secondary CPUs [ 40.476883][ T1764] Kernel Offset: disabled [ 40.477724][ T1764] CPU features: 0x40,0000081c,00800250,82017203 [ 40.478955][ T1764] Memory Limit: none [ 40.929995][ T1764] Rebooting in 86400 seconds..