last executing test programs: 6.351439116s ago: executing program 2 (id=16): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@tos={{0x28}, {0x3, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x110, 0x1000000, 0xffffffff, 0x110, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x4, 0x2, 0x0, 0x2, 0x4], 0x5, 0x1}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x310) 6.040492374s ago: executing program 2 (id=21): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x28, r0, 0x801, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}}, 0x0) 5.952730572s ago: executing program 2 (id=23): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 5.882099729s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='&(', 0x2) 5.810274221s ago: executing program 2 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1, @ANYBLOB="049a18"], 0x38}}, 0x0) 5.512277565s ago: executing program 2 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4.462975132s ago: executing program 1 (id=37): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4.361018226s ago: executing program 0 (id=38): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) 4.353277257s ago: executing program 1 (id=39): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0xa}, &(0x7f00000000c0)=0x8) 4.013627358s ago: executing program 1 (id=41): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xc1, 0xba, 0xda, 0x10, 0x2cb7, 0x104, 0x62f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xff, 0x20, 0x9, "", [{{0x9, 0x4, 0xa5, 0x2, 0x0, 0x9, 0x5a, 0xf8, 0x2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[]) 3.436790219s ago: executing program 4 (id=43): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) sendfile(r0, r0, 0x0, 0x7f03) 2.901640882s ago: executing program 4 (id=45): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 2.424335896s ago: executing program 3 (id=46): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.404874654s ago: executing program 4 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffffffff) 2.367536801s ago: executing program 0 (id=48): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="2c747970653dabe89a7a2c6769643d", @ANYBLOB="1a374270b2d7d83f58d69542f2af3c0ae06f040da0", @ANYBLOB='\x00\x00'], 0x1, 0x5e0, &(0x7f0000000140)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.122636955s ago: executing program 3 (id=49): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000380)={[{@noquota}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="7eb43775015323fa"}}) 1.310026149s ago: executing program 3 (id=50): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.076127692s ago: executing program 4 (id=51): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 888.103734ms ago: executing program 0 (id=52): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 869.84775ms ago: executing program 1 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505000"], 0x4c}}, 0x0) 821.499675ms ago: executing program 3 (id=54): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@orlov}, {@oldalloc}, {@orlov}, {@nogrpid}, {@resuid}, {@grpjquota}]}, 0x2, 0x57b, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 719.639584ms ago: executing program 4 (id=55): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff91, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x64, 0x0, 0x0, 0x0, 0xffffff31, 0x0, 0x8, 0x16, &(0x7f0000001380)}}, 0x10) 616.702378ms ago: executing program 0 (id=56): openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 516.501593ms ago: executing program 1 (id=57): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp']) socket$inet_tcp(0x2, 0x1, 0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 446.74916ms ago: executing program 4 (id=58): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000001e80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x22d1005, 0x0, 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 437.555963ms ago: executing program 3 (id=59): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 290.175686ms ago: executing program 0 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 123.952955ms ago: executing program 3 (id=61): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) 74.017238ms ago: executing program 1 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4a4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 67.833917][ T5600] cgroup: Unknown subsys name 'net' [ 67.915432][ T5600] cgroup: Unknown subsys name 'cpuset' [ 67.918078][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.231059][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.404165][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.404209][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.690267][ T4932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.692168][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.693103][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.711081][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.711738][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.714944][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.715586][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.716940][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.721103][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.727531][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.728805][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.729458][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.730738][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.732893][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.733604][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.733943][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.734578][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.735532][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.736414][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.739707][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.743117][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.756654][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.768044][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.781374][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.782070][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.448780][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.449263][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.449361][ T5623] bridge_slave_0: entered allmulticast mode [ 74.450366][ T5623] bridge_slave_0: entered promiscuous mode [ 74.503467][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.503643][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.503734][ T5623] bridge_slave_1: entered allmulticast mode [ 74.504753][ T5623] bridge_slave_1: entered promiscuous mode [ 74.544114][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.544202][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.544512][ T5611] bridge_slave_0: entered allmulticast mode [ 74.546032][ T5611] bridge_slave_0: entered promiscuous mode [ 74.602554][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.602649][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.602753][ T5611] bridge_slave_1: entered allmulticast mode [ 74.604248][ T5611] bridge_slave_1: entered promiscuous mode [ 74.628258][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.631254][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.678806][ T5623] team0: Port device team_slave_0 added [ 74.715643][ T5623] team0: Port device team_slave_1 added [ 74.750791][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.762754][ T5625] Bluetooth: hci0: command tx timeout [ 74.762916][ T5625] Bluetooth: hci1: command tx timeout [ 74.763390][ T5619] Bluetooth: hci3: command tx timeout [ 74.765215][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.765336][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.765411][ T5613] bridge_slave_0: entered allmulticast mode [ 74.766569][ T5613] bridge_slave_0: entered promiscuous mode [ 74.769448][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.769551][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.769676][ T5618] bridge_slave_0: entered allmulticast mode [ 74.772762][ T5618] bridge_slave_0: entered promiscuous mode [ 74.775902][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.775994][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.776392][ T5618] bridge_slave_1: entered allmulticast mode [ 74.778049][ T5618] bridge_slave_1: entered promiscuous mode [ 74.811729][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.828744][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.828760][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.828785][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.831378][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.831391][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.831425][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.833823][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.833923][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.834055][ T5613] bridge_slave_1: entered allmulticast mode [ 74.836027][ T5613] bridge_slave_1: entered promiscuous mode [ 74.845408][ T5619] Bluetooth: hci2: command tx timeout [ 74.853026][ T5619] Bluetooth: hci4: command tx timeout [ 74.891581][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.891701][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.892152][ T5610] bridge_slave_0: entered allmulticast mode [ 74.894676][ T5610] bridge_slave_0: entered promiscuous mode [ 75.049298][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.049392][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.049497][ T5610] bridge_slave_1: entered allmulticast mode [ 75.050970][ T5610] bridge_slave_1: entered promiscuous mode [ 75.054945][ T5611] team0: Port device team_slave_0 added [ 75.088145][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.090175][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.093103][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.096306][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.135520][ T5611] team0: Port device team_slave_1 added [ 75.198273][ T5618] team0: Port device team_slave_0 added [ 75.200719][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.226610][ T5613] team0: Port device team_slave_0 added [ 75.228389][ T5618] team0: Port device team_slave_1 added [ 75.230301][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.230867][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.230878][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.230895][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.234346][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.234358][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.234378][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.244341][ T5623] hsr_slave_0: entered promiscuous mode [ 75.245381][ T5623] hsr_slave_1: entered promiscuous mode [ 75.250144][ T5613] team0: Port device team_slave_1 added [ 75.340790][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.340807][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.340825][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.377349][ T5610] team0: Port device team_slave_0 added [ 75.382440][ T5610] team0: Port device team_slave_1 added [ 75.404160][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.404176][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.404196][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.416599][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.416613][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.416633][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.459224][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.459240][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.459260][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.506961][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.506977][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.506998][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.554168][ T5611] hsr_slave_0: entered promiscuous mode [ 75.555190][ T5611] hsr_slave_1: entered promiscuous mode [ 75.555892][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 75.555987][ T5611] Cannot create hsr debugfs directory [ 75.590531][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.590549][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.590570][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.674698][ T5618] hsr_slave_0: entered promiscuous mode [ 75.675958][ T5618] hsr_slave_1: entered promiscuous mode [ 75.676404][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 75.676422][ T5618] Cannot create hsr debugfs directory [ 75.759048][ T5613] hsr_slave_0: entered promiscuous mode [ 75.759811][ T5613] hsr_slave_1: entered promiscuous mode [ 75.760305][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 75.760327][ T5613] Cannot create hsr debugfs directory [ 75.783318][ T5610] hsr_slave_0: entered promiscuous mode [ 75.784326][ T5610] hsr_slave_1: entered promiscuous mode [ 75.785066][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 75.785082][ T5610] Cannot create hsr debugfs directory [ 76.228289][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.239591][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.240454][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.244907][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.247082][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.253839][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.257128][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.266560][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.347480][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.350045][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.370380][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.377924][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.385856][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.395131][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.395721][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.398066][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.478112][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.494150][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.505268][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.514656][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.516836][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.520508][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.521233][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.533466][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.637681][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.641167][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.663337][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.667807][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.695512][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.698221][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.698933][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.701138][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.722465][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.810456][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.815599][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.821164][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.838376][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.841240][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.843688][ T5624] Bluetooth: hci1: command tx timeout [ 76.843718][ T5624] Bluetooth: hci0: command tx timeout [ 76.843915][ T5619] Bluetooth: hci3: command tx timeout [ 76.858123][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.860856][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.866818][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.879403][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.896938][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.901701][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.902078][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.927428][ T5625] Bluetooth: hci2: command tx timeout [ 76.927530][ T5619] Bluetooth: hci4: command tx timeout [ 76.949347][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.949411][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.965892][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.994401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.994461][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.020348][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.031153][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.031220][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.109757][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.127380][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.127439][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.189872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.189962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.214803][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.321782][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.365033][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.365118][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.411041][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.411145][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.441614][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.537118][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.581107][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.581253][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.609885][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.610037][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.097783][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.330931][ T5623] veth0_vlan: entered promiscuous mode [ 78.352369][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.398723][ T5623] veth1_vlan: entered promiscuous mode [ 78.546107][ T5623] veth0_macvtap: entered promiscuous mode [ 78.562013][ T5611] veth0_vlan: entered promiscuous mode [ 78.566487][ T5623] veth1_macvtap: entered promiscuous mode [ 78.606071][ T5611] veth1_vlan: entered promiscuous mode [ 78.631755][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.648453][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.691566][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.758730][ T5611] veth0_macvtap: entered promiscuous mode [ 78.772626][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773037][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773071][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773100][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.799488][ T5611] veth1_macvtap: entered promiscuous mode [ 78.806896][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.895872][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.922057][ T5625] Bluetooth: hci0: command tx timeout [ 78.922088][ T5625] Bluetooth: hci1: command tx timeout [ 78.922200][ T5619] Bluetooth: hci3: command tx timeout [ 78.969232][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.987557][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.002164][ T5624] Bluetooth: hci2: command tx timeout [ 79.002425][ T5619] Bluetooth: hci4: command tx timeout [ 79.003472][ T5618] veth0_vlan: entered promiscuous mode [ 79.056861][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.056895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.108210][ T5618] veth1_vlan: entered promiscuous mode [ 79.187365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.187385][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.279629][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.279667][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.304058][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.335075][ T5618] veth0_macvtap: entered promiscuous mode [ 79.350684][ T5623] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.393541][ T5618] veth1_macvtap: entered promiscuous mode [ 79.394693][ T5610] veth0_vlan: entered promiscuous mode [ 79.399834][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.399851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.433508][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.437385][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.437446][ T45] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.472267][ T5610] veth1_vlan: entered promiscuous mode [ 79.540263][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.555175][ T5613] veth0_vlan: entered promiscuous mode [ 79.582449][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.603698][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.603967][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.611702][ T5613] veth1_vlan: entered promiscuous mode [ 79.688778][ T5610] veth0_macvtap: entered promiscuous mode [ 79.733991][ T5610] veth1_macvtap: entered promiscuous mode [ 79.742454][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.742497][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.906104][ T5613] veth0_macvtap: entered promiscuous mode [ 79.927684][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.975381][ T5816] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 80.003808][ T5613] veth1_macvtap: entered promiscuous mode [ 80.033375][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.033395][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.059797][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.133720][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.133986][ T99] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.134022][ T99] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.134055][ T99] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.194617][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.206683][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.206701][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.250839][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.292067][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.313958][ T5820] loop2: detected capacity change from 0 to 64 [ 80.353264][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.353655][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.487687][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.487707][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.524850][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.603289][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.603309][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.628247][ T5822] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 80.694298][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.694318][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.852004][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.852023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.926509][ T5824] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.002710][ T5624] Bluetooth: hci1: command tx timeout [ 81.003154][ T5624] Bluetooth: hci0: command tx timeout [ 81.003210][ T5619] Bluetooth: hci3: command tx timeout [ 81.082682][ T5625] Bluetooth: hci2: command tx timeout [ 81.082730][ T5619] Bluetooth: hci4: command tx timeout [ 81.138561][ T5828] Bluetooth: MGMT ver 1.23 [ 81.199114][ T5830] loop3: detected capacity change from 0 to 512 [ 81.199930][ T5830] ======================================================= [ 81.199930][ T5830] WARNING: The mand mount option has been deprecated and [ 81.199930][ T5830] and is ignored by this kernel. Remove the mand [ 81.199930][ T5830] option from the mount to silence this warning. [ 81.199930][ T5830] ======================================================= [ 81.200014][ T5830] EXT4-fs: Ignoring removed orlov option [ 81.200030][ T5830] EXT4-fs: Ignoring removed nobh option [ 81.200079][ T5830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.200096][ T5830] EXT4-fs: Ignoring removed bh option [ 81.313159][ T5830] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 81.320807][ T5830] EXT4-fs (loop3): 1 orphan inode deleted [ 81.335508][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.412913][ T5840] loop4: detected capacity change from 0 to 1024 [ 81.475573][ T5830] CacheFiles: mkdir cache failed with error -1 [ 81.475642][ T5830] CacheFiles: Failed to register: -1 [ 81.524922][ T5840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.614910][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.639882][ T5847] Cannot find set identified by id 4 to match [ 81.776859][ T5852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.852210][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.076520][ T5878] loop4: detected capacity change from 0 to 32768 [ 83.174016][ T5878] JBD2: Ignoring recovery information on journal [ 83.177597][ T5878] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 83.177821][ T5878] JBD2: bad block at offset 32 [ 83.250228][ T5878] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 83.693562][ T5613] ocfs2: Unmounting device (7,4) on (node local) [ 83.874005][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 84.028781][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 84.028869][ T9] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 84.030786][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 84.057312][ T5887] loop3: detected capacity change from 0 to 32768 [ 84.080290][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.080315][ T9] usb 1-1: Product: syz [ 84.080328][ T9] usb 1-1: Manufacturer: syz [ 84.080349][ T9] usb 1-1: SerialNumber: syz [ 84.104494][ T5804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.135102][ T9] oti6858 1-1:1.0: oti6858 converter detected [ 84.140899][ T9] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 84.237683][ T5887] blkno = 8ed2c, nblocks = 1 [ 84.237709][ T5887] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 84.237709][ T5887] [ 84.250545][ T5887] ERROR: (device loop3): remounting filesystem as read-only [ 84.250570][ T5887] ialloc: diAlloc returned -17! [ 84.257450][ T32] audit: type=1400 audit(1788983318.693:2): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=5906 comm="syz.4.42" name="p" offset=33 [ 84.304939][ T123] blkno = 8ed2c, nblocks = 1 [ 84.304956][ T123] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 84.304956][ T123] [ 84.316327][ T5887] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 84.316327][ T5887] [ 84.329446][ T5887] syz.3.34: attempt to access beyond end of device [ 84.329446][ T5887] loop3: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 84.333886][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 84.349371][ T5804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.366119][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.366165][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.366187][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.366204][ T5804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.366276][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.390867][ T5804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.390893][ T5804] usb 2-1: Manufacturer: syz [ 84.484961][ T5804] usb 2-1: config 0 descriptor?? [ 84.488346][ T122] blkno = 8ed2c, nblocks = 1 [ 84.488363][ T122] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 84.488363][ T122] [ 84.622830][ T5909] loop4: detected capacity change from 0 to 512 [ 84.681101][ T5909] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.43: corrupted in-inode xattr: invalid ea_ino [ 84.681313][ T5909] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.682934][ C1] EXT4-fs (loop4): initial error at time 1788983319: ext4_iget_extra_inode:5210: inode 15 [ 84.682970][ C1] EXT4-fs (loop4): last error at time 1788983319: ext4_iget_extra_inode:5210: inode 15 [ 84.706972][ T5909] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.43: couldn't read orphan inode 15 (err -117) [ 84.707177][ T5909] loop4: lost filesystem error report for type 5 error -117 [ 84.716672][ T5909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.767558][ T32] audit: type=1800 audit(1788983319.203:3): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.43" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 84.877097][ T44] usb 1-1: USB disconnect, device number 2 [ 84.894721][ T5804] rc_core: IR keymap rc-hauppauge not found [ 84.894738][ T5804] Registered IR keymap rc-empty [ 84.895112][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.915232][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 84.948980][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.968409][ T5804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 84.970717][ T5804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 84.993211][ T44] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 84.997278][ T44] oti6858 1-1:1.0: device disconnected [ 85.030109][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.042112][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.072054][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.102018][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.122130][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.141977][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.172300][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.192009][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.218408][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.234392][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 85.256055][ T5804] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 85.256080][ T5804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 85.272495][ T5917] kernel profiling enabled (shift: 9) [ 85.316784][ T5804] usb 2-1: USB disconnect, device number 2 from 0 to 1024 [ 85.708259][ T5925] loop3: detected capacity change from 0 to 512 [ 85.734513][ T5925] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.49: Unimplemented hash flags: 0x0001 [ 85.734547][ T5925] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.49: Corrupt directory, running e2fsck is recommended [ 85.739643][ T5925] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 85.739940][ T5925] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.49: corrupted in-inode xattr: invalid ea_ino [ 85.739965][ T5925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.740410][ T5925] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.49: couldn't read orphan inode 15 (err -117) [ 85.740433][ T5925] loop3: lost filesystem error report for type 5 error -117 [ 85.743555][ T5925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.655146][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.765157][ T991] cfg80211: failed to load regulatory.db [ 87.115648][ T5935] loop3: detected capacity change from 0 to 1024 [ 87.120859][ T5935] EXT4-fs: Ignoring removed orlov option [ 87.120880][ T5935] EXT4-fs: Ignoring removed oldalloc option [ 87.120892][ T5935] EXT4-fs: Ignoring removed orlov option [ 87.151581][ T5935] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 87.151754][ T5935] System zones: 0-1, 3-12 [ 87.160766][ T5935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.200974][ T5935] EXT4-fs error (device loop3): __ext4_new_inode:1289: comm syz.3.54: failed to insert inode 12: doubly allocated? [ 87.304911][ T5941] capability: warning: `syz.4.55' uses deprecated v2 capabilities in a way that may be insecure [ 87.384499][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.691523][ T5946] loop4: detected capacity change from 0 to 4096 [ 87.814253][ T5876] Set syz1 is full, maxelem 65536 reached [ 87.850904][ T5955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.62/5955 [ 87.850930][ T5955] caller is ieee80211_tx_control_port+0xac7/0x1100 [ 87.851389][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 87.851411][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.851430][ T5955] Call Trace: [ 87.851441][ T5955] [ 87.851450][ T5955] dump_stack_lvl+0xe8/0x150 [ 87.851482][ T5955] check_preemption_disabled+0xcd/0xd0 [ 87.851509][ T5955] ieee80211_tx_control_port+0xac7/0x1100 [ 87.851533][ T5955] ? ieee80211_tx_control_port+0x71b/0x1100 [ 87.851561][ T5955] nl80211_tx_control_port+0x624/0x960 [ 87.851601][ T5955] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 87.851629][ T5955] ? nl80211_pre_doit+0x53d/0x890 [ 87.851658][ T5955] genl_family_rcv_msg_doit+0x233/0x340 [ 87.851686][ T5955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.851719][ T5955] ? bpf_lsm_capable+0x9/0x20 [ 87.851738][ T5955] ? security_capable+0x7e/0x2c0 [ 87.851774][ T5955] genl_rcv_msg+0x614/0x7a0 [ 87.851800][ T5955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.851815][ T5955] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.851833][ T5955] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 87.851852][ T5955] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.851875][ T5955] ? __asan_memcpy+0x40/0x70 [ 87.851895][ T5955] ? __skb_clone+0x5c/0x6c0 [ 87.851923][ T5955] netlink_rcv_skb+0x226/0x4a0 [ 87.851950][ T5955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.851971][ T5955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.852012][ T5955] ? down_read+0x2b9/0x320 [ 87.852038][ T5955] genl_rcv+0x28/0x40 [ 87.852055][ T5955] netlink_unicast+0x7bd/0x940 [ 87.852089][ T5955] netlink_sendmsg+0x7c3/0xae0 [ 87.852121][ T5955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.852156][ T5955] ? apparmor_socket_sendmsg+0x98/0x360 [ 87.852185][ T5955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.852209][ T5955] sock_sendmsg_nosec+0x13a/0x180 [ 87.852240][ T5955] ____sys_sendmsg+0x54e/0x850 [ 87.852268][ T5955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.852301][ T5955] ? import_iovec+0x73/0xa0 [ 87.852324][ T5955] ___sys_sendmsg+0x2a5/0x360 [ 87.852345][ T5955] ? __lock_acquire+0x747/0x2de0 [ 87.852380][ T5955] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.852408][ T5955] ? futex_wait+0x2a2/0x390 [ 87.852455][ T5955] ? __fget_files+0x2a/0x420 [ 87.852473][ T5955] ? __fget_files+0x3a2/0x420 [ 87.852504][ T5955] __x64_sys_sendmsg+0x1b1/0x290 [ 87.852530][ T5955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.852575][ T5955] do_syscall_64+0x166/0x520 [ 87.852594][ T5955] ? trace_irq_disable+0x3b/0x140 [ 87.852615][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.852634][ T5955] ? clear_bhb_loop+0x70/0xc0 [ 87.852657][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.852676][ T5955] RIP: 0033:0x7fe707f9e159 [ 87.852702][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.852717][ T5955] RSP: 002b:00007fe708f51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.852738][ T5955] RAX: ffffffffffffffda RBX: 00007fe708225fa0 RCX: 00007fe707f9e159 [ 87.852752][ T5955] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 87.852764][ T5955] RBP: 00007fe70803503b R08: 0000000000000000 R09: 0000000000000000 [ 87.852776][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.852787][ T5955] R13: 00007fe708226038 R14: 00007fe708225fa0 R15: 00007ffc5cd2f2a8 [ 87.852819][ T5955] [ 87.895397][ T5957] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds