last executing test programs:

823.556848ms ago: executing program 4 (id=5):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000004f00)=ANY=[], 0x12f4}}, 0x4)
recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000ac0)=""/215, 0xd7}], 0x2}, 0xfffffffd}], 0x2, 0x40010100, 0x0)

823.430643ms ago: executing program 1 (id=2):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0)

823.384148ms ago: executing program 3 (id=4):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

759.273389ms ago: executing program 3 (id=18):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = gettid()
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8)
write$rfkill(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

667.922285ms ago: executing program 1 (id=19):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x10, 0xb3, 0x0, 0x3, [0x2, 0x0, 0x9]}, @rr={0x7, 0xb, 0xaa, [@multicast2, @local]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

649.667658ms ago: executing program 4 (id=22):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)

528.018376ms ago: executing program 1 (id=23):
syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @loopback, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @enc_lim={0x4, 0x1, 0xc}]}]}}}}}, 0x0)

527.877059ms ago: executing program 0 (id=24):
r0 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)

492.281667ms ago: executing program 1 (id=26):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe26, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}}, 0x40044)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5c840}, 0x2000c005)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

416.024626ms ago: executing program 0 (id=28):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x0)
recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0)

415.870534ms ago: executing program 2 (id=29):
socket$inet6(0xa, 0x2, 0x100)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0403220c01"], 0x7)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

341.79054ms ago: executing program 0 (id=30):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x4e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

325.830294ms ago: executing program 2 (id=31):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x200418cc)

212.067321ms ago: executing program 0 (id=32):
r0 = fanotify_init(0x10, 0x1)
fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0)

211.884437ms ago: executing program 2 (id=33):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

195.503632ms ago: executing program 0 (id=34):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="3900000013000347004739c7ea2a70f02e000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

148.381612ms ago: executing program 2 (id=35):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0)

67.894703ms ago: executing program 2 (id=36):
r0 = socket$inet6(0xa, 0x6, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

67.750428ms ago: executing program 0 (id=37):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10)

50.571826ms ago: executing program 4 (id=38):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x280b})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)="893c581a"})

0s ago: executing program 2 (id=39):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x400000000000354, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts.
[   33.330491][ T6417] cgroup: Unknown subsys name 'net'
[   33.588361][ T6417] cgroup: Unknown subsys name 'cpuset'
[   33.591939][ T6417] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.964896][ T6417] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   35.279127][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   35.281510][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   35.283247][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   35.285125][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   35.287698][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   35.289269][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   35.387941][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   35.389869][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   35.391513][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   35.393388][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   35.395175][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   35.402975][ T6428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   35.406389][ T6428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   35.419762][ T6428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   35.422064][ T6428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   35.428054][ T6438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   35.430035][ T6438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   35.432331][ T6441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   35.432467][ T6438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   35.435448][ T6441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   35.435448][ T6438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   35.438819][ T6438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   35.440911][ T6438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   35.442839][ T6438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   35.444529][ T6438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   35.446041][ T6438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   35.448390][ T6445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   35.462843][ T6441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   35.464783][ T6441] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   35.466706][ T6441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   35.615069][ T6427] chnl_net:caif_netlink_parms(): no params data found
[   35.701123][ T6434] chnl_net:caif_netlink_parms(): no params data found
[   35.737446][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.738863][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.740335][ T6427] bridge_slave_0: entered allmulticast mode
[   35.742162][ T6427] bridge_slave_0: entered promiscuous mode
[   35.745970][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.747599][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.749060][ T6427] bridge_slave_1: entered allmulticast mode
[   35.750677][ T6427] bridge_slave_1: entered promiscuous mode
[   35.752697][ T6440] chnl_net:caif_netlink_parms(): no params data found
[   35.762648][ T6442] chnl_net:caif_netlink_parms(): no params data found
[   35.799814][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.805467][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.811339][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.812742][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.814162][ T6434] bridge_slave_0: entered allmulticast mode
[   35.815823][ T6434] bridge_slave_0: entered promiscuous mode
[   35.846235][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.847973][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.849427][ T6434] bridge_slave_1: entered allmulticast mode
[   35.851057][ T6434] bridge_slave_1: entered promiscuous mode
[   35.860876][ T6427] team0: Port device team_slave_0 added
[   35.870928][ T6427] team0: Port device team_slave_1 added
[   35.903058][ T6437] chnl_net:caif_netlink_parms(): no params data found
[   35.913526][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.914955][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.920258][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.927992][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.929449][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.930827][ T6442] bridge_slave_0: entered allmulticast mode
[   35.932467][ T6442] bridge_slave_0: entered promiscuous mode
[   35.935811][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.947123][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.948498][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.949946][ T6440] bridge_slave_0: entered allmulticast mode
[   35.951624][ T6440] bridge_slave_0: entered promiscuous mode
[   35.953865][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.955298][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.961444][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.966450][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.968046][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.969611][ T6442] bridge_slave_1: entered allmulticast mode
[   35.971234][ T6442] bridge_slave_1: entered promiscuous mode
[   35.973767][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.981595][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.982919][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.984404][ T6440] bridge_slave_1: entered allmulticast mode
[   35.985995][ T6440] bridge_slave_1: entered promiscuous mode
[   35.999467][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.022524][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.030058][ T6434] team0: Port device team_slave_0 added
[   36.056640][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.098271][ T6427] hsr_slave_0: entered promiscuous mode
[   36.146816][ T6427] hsr_slave_1: entered promiscuous mode
[   36.213139][ T6434] team0: Port device team_slave_1 added
[   36.219498][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.222421][ T6442] team0: Port device team_slave_0 added
[   36.232294][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.233680][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.234991][ T6437] bridge_slave_0: entered allmulticast mode
[   36.236902][ T6437] bridge_slave_0: entered promiscuous mode
[   36.252607][ T6442] team0: Port device team_slave_1 added
[   36.255200][ T6440] team0: Port device team_slave_0 added
[   36.261133][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.262637][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.264081][ T6437] bridge_slave_1: entered allmulticast mode
[   36.265791][ T6437] bridge_slave_1: entered promiscuous mode
[   36.276977][ T6440] team0: Port device team_slave_1 added
[   36.284329][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.285780][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.291195][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.314529][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.315872][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.321205][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.324307][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.325669][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.331067][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.345771][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.350320][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.351706][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.357255][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.360241][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.361584][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.371169][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.377168][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.382160][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.383567][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.388825][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.448249][ T6434] hsr_slave_0: entered promiscuous mode
[   36.496965][ T6434] hsr_slave_1: entered promiscuous mode
[   36.566861][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.568525][ T6434] Cannot create hsr debugfs directory
[   36.574333][ T6437] team0: Port device team_slave_0 added
[   36.577348][ T6437] team0: Port device team_slave_1 added
[   36.678258][ T6442] hsr_slave_0: entered promiscuous mode
[   36.726885][ T6442] hsr_slave_1: entered promiscuous mode
[   36.766710][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.768298][ T6442] Cannot create hsr debugfs directory
[   36.772568][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.773941][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.779678][ T6437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.782931][ T6437] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.784371][ T6437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.789698][ T6437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.848310][ T6440] hsr_slave_0: entered promiscuous mode
[   36.886929][ T6440] hsr_slave_1: entered promiscuous mode
[   36.926573][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   36.928231][ T6440] Cannot create hsr debugfs directory
[   37.008189][ T6437] hsr_slave_0: entered promiscuous mode
[   37.047200][ T6437] hsr_slave_1: entered promiscuous mode
[   37.086601][ T6437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.088173][ T6437] Cannot create hsr debugfs directory
[   37.200646][ T6427] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.212964][ T6427] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.216072][ T6427] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.233158][ T6427] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.260716][ T6442] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.263476][ T6442] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.267651][ T6442] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.282949][ T6442] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.297063][ T6441] Bluetooth: hci0: command tx timeout
[   37.313924][ T6434] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.317415][ T6434] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.327423][ T6434] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.346698][ T6434] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.362362][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.390349][ T6437] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.401664][ T6427] 8021q: adding VLAN 0 to HW filter on device team0
[   37.404712][ T6437] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.408520][ T6437] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.417108][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.418611][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.422925][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.424418][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.429827][ T6437] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.456669][ T5991] Bluetooth: hci1: command tx timeout
[   37.458187][ T6441] Bluetooth: hci2: command tx timeout
[   37.466317][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.468196][ T6441] Bluetooth: hci4: command tx timeout
[   37.484042][ T6442] 8021q: adding VLAN 0 to HW filter on device team0
[   37.487300][ T6440] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.490237][ T6440] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.493018][ T6440] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.506121][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.507614][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.511454][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.512883][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.517932][ T6440] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.546735][ T6441] Bluetooth: hci3: command tx timeout
[   37.559925][ T6442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.562009][ T6442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.595905][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.602692][ T6437] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.634018][ T6437] 8021q: adding VLAN 0 to HW filter on device team0
[   37.639539][ T6434] 8021q: adding VLAN 0 to HW filter on device team0
[   37.652232][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.653608][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.655815][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.657255][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.672336][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.673793][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.683174][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.685665][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.687091][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.710618][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.732488][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.738031][ T6440] 8021q: adding VLAN 0 to HW filter on device team0
[   37.743476][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.744898][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.748364][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.749741][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.795191][ T6437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   37.797970][ T6437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.804842][ T6442] veth0_vlan: entered promiscuous mode
[   37.858821][ T6442] veth1_vlan: entered promiscuous mode
[   37.909025][ T6442] veth0_macvtap: entered promiscuous mode
[   37.911826][ T6442] veth1_macvtap: entered promiscuous mode
[   37.938911][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.942822][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.945760][ T6442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.949765][ T6442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.951573][ T6442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.953388][ T6442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.980874][ T6437] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.991175][ T6427] veth0_vlan: entered promiscuous mode
[   37.999279][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.007402][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.029054][ T6427] veth1_vlan: entered promiscuous mode
[   38.069045][  T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.070766][  T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.079883][ T6437] veth0_vlan: entered promiscuous mode
[   38.086362][ T6437] veth1_vlan: entered promiscuous mode
[   38.101823][  T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.103430][  T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.113836][ T6440] veth0_vlan: entered promiscuous mode
[   38.130901][ T6434] veth0_vlan: entered promiscuous mode
[   38.135487][ T6437] veth0_macvtap: entered promiscuous mode
[   38.143672][ T6437] veth1_macvtap: entered promiscuous mode
[   38.151622][ T6427] veth0_macvtap: entered promiscuous mode
[   38.153617][ T6434] veth1_vlan: entered promiscuous mode
[   38.161301][ T6427] veth1_macvtap: entered promiscuous mode
[   38.165124][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.168004][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.171520][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.180417][ T6440] veth1_vlan: entered promiscuous mode
[   38.182427][ T6442] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.190125][ T6437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.192180][ T6437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.194952][ T6437] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.201154][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.203144][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.205038][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.208902][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.212382][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.215357][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.222453][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.224375][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.237400][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.239997][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.279832][ T6437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.281648][ T6437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.283258][ T6437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.284936][ T6437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.294705][ T6487] IPVS: starting estimator thread 0...
[   38.294964][ T6427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.300736][ T6427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.302467][ T6427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.304120][ T6427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.314040][ T6440] veth0_macvtap: entered promiscuous mode
[   38.342591][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.350093][ T6434] veth0_macvtap: entered promiscuous mode
[   38.360083][ T6434] veth1_macvtap: entered promiscuous mode
[   38.363214][ T6440] veth1_macvtap: entered promiscuous mode
[   38.379857][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.381873][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.383801][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.385698][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.389929][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.392084][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.394903][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.396798][ T6511] IPVS: using max 26 ests per chain, 62400 per kthread
[   38.428425][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.430580][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.432456][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.434458][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.436390][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.438956][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.440946][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.442952][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.445819][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.449243][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.451299][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.453186][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.455112][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.460596][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.462646][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.465540][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.488661][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.490764][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.492851][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.495024][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.497746][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.499886][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.502182][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.504276][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.515748][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.520302][ T6440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.522151][ T6440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.523828][ T6440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.525438][ T6440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.535063][  T253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.538063][  T253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.557777][ T6434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.559525][ T6434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.561251][ T6434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.562856][ T6434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.629525][  T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.631178][  T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.653705][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.655200][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.683904][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.685422][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.744855][  T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.756917][  T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.799501][  T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.799733][  T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.801019][  T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.808272][  T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.860844][  T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.862426][  T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.069830][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'.
[   39.154679][ T6553] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   39.155984][ T6553] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   39.180925][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'.
[   39.190215][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.192198][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.318249][ T6553] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   39.319420][ T6553] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   39.341621][ T6574] tipc: Started in network mode
[   39.342823][ T6574] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711
[   39.345252][ T6574] tipc: Enabled bearer <udp:syz0>, priority 10
[   39.487518][ T6584] Zero length message leads to an empty skb
[   39.510021][ T6553] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   39.511224][ T6553] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   39.536735][ T6441] Bluetooth: hci4: command tx timeout
[   39.642867][ T6592] netlink: 'syz.0.34': attribute type 4 has an invalid length.
[   39.686461][ T6592] netlink: 'syz.0.34': attribute type 4 has an invalid length.
[   39.747655][ T6553] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   39.749404][ T6553] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   39.840226][ T6602] binder: 6601:6602 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   39.843120][ T6602] binder: 6602 RLIMIT_NICE not set
[   39.844791][ T1764] ==================================================================
[   39.846506][ T1764] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x34/0x158
[   39.848320][ T1764] Read of size 8 at addr ffff0000c5f6f988 by task kworker/1:2/1764
[   39.849831][ T1764] 
[   39.850301][ T1764] CPU: 1 UID: 0 PID: 1764 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
[   39.852220][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.854174][ T1764] Workqueue: events binder_deferred_func
[   39.855267][ T1764] Call trace:
[   39.855900][ T1764]  show_stack+0x2c/0x3c (C)
[   39.856828][ T1764]  dump_stack_lvl+0xe4/0x150
[   39.857710][ T1764]  print_report+0x198/0x538
[   39.858592][ T1764]  kasan_report+0xd8/0x138
[   39.859468][ T1764]  __asan_report_load8_noabort+0x20/0x2c
[   39.860584][ T1764]  __list_del_entry_valid_or_report+0x34/0x158
[   39.861805][ T1764]  binder_release_work+0xc0/0x4f4
[   39.862807][ T1764]  binder_deferred_func+0x109c/0x1270
[   39.863871][ T1764]  process_one_work+0x7bc/0x1600
[   39.864782][ T1764]  worker_thread+0x97c/0xeec
[   39.865695][ T1764]  kthread+0x288/0x310
[   39.866531][ T1764]  ret_from_fork+0x10/0x20
[   39.867385][ T1764] 
[   39.867822][ T1764] Allocated by task 6602:
[   39.868726][ T1764]  kasan_save_track+0x40/0x78
[   39.869640][ T1764]  kasan_save_alloc_info+0x40/0x50
[   39.870653][ T1764]  __kasan_kmalloc+0xac/0xc4
[   39.871557][ T1764]  __kmalloc_cache_noprof+0x244/0x378
[   39.872611][ T1764]  binder_ioctl_write_read+0x1e94/0xb0d8
[   39.873681][ T1764]  binder_ioctl+0x408/0x2670
[   39.874565][ T1764]  __arm64_sys_ioctl+0x14c/0x1c8
[   39.875537][ T1764]  invoke_syscall+0x98/0x2b8
[   39.876472][ T1764]  el0_svc_common+0x130/0x23c
[   39.877388][ T1764]  do_el0_svc+0x48/0x58
[   39.878194][ T1764]  el0_svc+0x54/0x168
[   39.878920][ T1764]  el0t_64_sync_handler+0x84/0x108
[   39.879926][ T1764]  el0t_64_sync+0x198/0x19c
[   39.880817][ T1764] 
[   39.881340][ T1764] Freed by task 1764:
[   39.882120][ T1764]  kasan_save_track+0x40/0x78
[   39.883000][ T1764]  kasan_save_free_info+0x54/0x6c
[   39.884021][ T1764]  __kasan_slab_free+0x64/0x8c
[   39.884983][ T1764]  kfree+0x184/0x47c
[   39.885848][ T1764]  binder_deferred_func+0xff0/0x1270
[   39.886904][ T1764]  process_one_work+0x7bc/0x1600
[   39.887883][ T1764]  worker_thread+0x97c/0xeec
[   39.888788][ T1764]  kthread+0x288/0x310
[   39.889672][ T1764]  ret_from_fork+0x10/0x20
[   39.890577][ T1764] 
[   39.891039][ T1764] The buggy address belongs to the object at ffff0000c5f6f980
[   39.891039][ T1764]  which belongs to the cache kmalloc-64 of size 64
[   39.893954][ T1764] The buggy address is located 8 bytes inside of
[   39.893954][ T1764]  freed 64-byte region [ffff0000c5f6f980, ffff0000c5f6f9c0)
[   39.896967][ T1764] 
[   39.897433][ T1764] The buggy address belongs to the physical page:
[   39.898720][ T1764] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105f6f
[   39.900600][ T1764] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff)
[   39.902105][ T1764] page_type: f5(slab)
[   39.902890][ T1764] raw: 05ffc00000000000 ffff0000c00018c0 fffffdffc35dfcc0 dead000000000006
[   39.904736][ T1764] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[   39.906615][ T1764] page dumped because: kasan: bad access detected
[   39.907905][ T1764] 
[   39.908410][ T1764] Memory state around the buggy address:
[   39.909590][ T1764]  ffff0000c5f6f880: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[   39.911254][ T1764]  ffff0000c5f6f900: 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc fc
[   39.912922][ T1764] >ffff0000c5f6f980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   39.914515][ T1764]                       ^
[   39.915332][ T1764]  ffff0000c5f6fa00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   39.917072][ T1764]  ffff0000c5f6fa80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   39.918751][ T1764] ==================================================================
[   39.920825][ T1764] Disabling lock debugging due to kernel taint
[   39.922067][ T1764] Unable to handle kernel paging request at virtual address e0e3c07ba00000dc
[   39.923723][ T1764] KASAN: maybe wild-memory-access in range [0x072203dd000006e0-0x072203dd000006e7]
[   39.925571][ T1764] Mem abort info:
[   39.926229][ T1764]   ESR = 0x0000000096000004
[   39.927471][ T1764]   EC = 0x25: DABT (current EL), IL = 32 bits
[   39.928832][ T1764]   SET = 0, FnV = 0
[   39.929565][ T1764]   EA = 0, S1PTW = 0
[   39.930479][ T1764]   FSC = 0x04: level 0 translation fault
[   39.931673][ T1764] Data abort info:
[   39.932415][ T1764]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
[   39.933579][ T1764]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[   39.934823][ T1764]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[   39.936089][ T1764] [e0e3c07ba00000dc] address between user and kernel address ranges
[   39.937979][ T1764] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[   39.939361][ T1764] Modules linked in:
[   39.940032][ T1764] CPU: 1 UID: 0 PID: 1764 Comm: kworker/1:2 Tainted: G    B              6.12.0-syzkaller-g7b1d1d4cfac0 #0
[   39.942528][ T1764] Tainted: [B]=BAD_PAGE
[   39.943388][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.945422][ T1764] Workqueue: events binder_deferred_func
[   39.946633][ T1764] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   39.948222][ T1764] pc : __list_del_entry_valid_or_report+0x78/0x158
[   39.949567][ T1764] lr : __list_del_entry_valid_or_report+0x4c/0x158
[   39.950847][ T1764] sp : ffff8000a02a79c0
[   39.951714][ T1764] x29: ffff8000a02a79c0 x28: ffff700014054f80 x27: ffff0000c5f6f980
[   39.953406][ T1764] x26: dfff800000000000 x25: ffff8000922b00a0 x24: ffff80008f154f3b
[   39.955039][ T1764] x23: ffff80008f154f16 x22: dfff800000000000 x21: 072203dd000006e4
[   39.956664][ T1764] x20: ffff0000d875c700 x19: ffff0000c5f6f980 x18: 0000000000000008
[   39.958279][ T1764] x17: 0000000000000000 x16: ffff80008b47f65c x15: 0000000000000001
[   39.959881][ T1764] x14: 1ffff000125bc2e8 x13: 0000000000000000 x12: 0000000000000000
[   39.961509][ T1764] x11: ffff7000125bc2e9 x10: 0000000000ff0100 x9 : ffff80009746b3a0
[   39.963220][ T1764] x8 : 00e4407ba00000dc x7 : 0000000000000001 x6 : 0000000000000001
[   39.964892][ T1764] x5 : ffff8000a02a6ff8 x4 : ffff80008f9bd220 x3 : ffff800083161924
[   39.966627][ T1764] x2 : dead000000000122 x1 : 0000000000000008 x0 : 0000000000000000
[   39.968333][ T1764] Call trace:
[   39.969004][ T1764]  __list_del_entry_valid_or_report+0x78/0x158 (P)
[   39.970304][ T1764]  __list_del_entry_valid_or_report+0x4c/0x158 (L)
[   39.971718][ T1764]  binder_release_work+0xc0/0x4f4
[   39.972815][ T1764]  binder_deferred_func+0x109c/0x1270
[   39.973914][ T1764]  process_one_work+0x7bc/0x1600
[   39.974895][ T1764]  worker_thread+0x97c/0xeec
[   39.975817][ T1764]  kthread+0x288/0x310
[   39.976676][ T1764]  ret_from_fork+0x10/0x20
[   39.977641][ T1764] Code: 91008902 eb0202bf 54000520 d343fea8 (38766908) 
[   39.979147][ T1764] ---[ end trace 0000000000000000 ]---
[   40.474654][ T1764] Kernel panic - not syncing: Oops: Fatal exception
[   40.475907][ T1764] SMP: stopping secondary CPUs
[   40.476883][ T1764] Kernel Offset: disabled
[   40.477724][ T1764] CPU features: 0x40,0000081c,00800250,82017203
[   40.478955][ T1764] Memory Limit: none
[   40.929995][ T1764] Rebooting in 86400 seconds..