last executing test programs: 2.991556743s ago: executing program 3 (id=85): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 2.768513338s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 2.759208539s ago: executing program 1 (id=87): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) 2.628530772s ago: executing program 0 (id=88): r0 = io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0x709f, 0x1000, 0x2, 0xe3}) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}, 0x6}], 0x1, 0x40002042, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) 2.558578004s ago: executing program 1 (id=89): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x400000, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x7, 0x1, {0xd, 0x7, 0xae, 0xfffffffd, 0x2, 0x5, 0xfff}}, {0x4}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x6c}}, 0x0) 2.558095234s ago: executing program 2 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.488572846s ago: executing program 0 (id=91): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', r2, 0x40, 0x7800, 0x7, 0x937b, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 2.378982619s ago: executing program 1 (id=92): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1) fallocate(r0, 0x0, 0x659, 0x10001) copy_file_range(r0, 0x0, r0, 0x0, 0x3, 0x0) 2.269053991s ago: executing program 1 (id=94): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2.267591122s ago: executing program 0 (id=95): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000200)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@utf8no}]}, 0xff, 0x373, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/70, 0x46) getdents64(r0, 0xfffffffffffffffe, 0xff80) 2.177033314s ago: executing program 2 (id=96): io_setup(0x81, &(0x7f0000001100)=0x0) r1 = syz_io_uring_setup(0x2afc, &(0x7f0000000900)={0x0, 0x0, 0x13090, 0xffffffff, 0x800000}, &(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_uring_enter(r1, 0x4da3, 0xd93, 0x0, 0x0, 0x0) 1.907323511s ago: executing program 0 (id=97): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='^,', 0x2) 1.838313333s ago: executing program 2 (id=98): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) 1.700518126s ago: executing program 2 (id=99): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) inotify_init1(0x80800) 1.525948241s ago: executing program 0 (id=100): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 1.266796897s ago: executing program 1 (id=101): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000180)) 1.255215298s ago: executing program 3 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xb, 0x5}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 946.116766ms ago: executing program 3 (id=103): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0x0, 0x37e, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=mixed,utf8=1,sys_immutable,shortname=win95,rodir,dos1xfloppy,shortname=lower,shortname=lower,utf8=1,check=strict,utf8=0,utf8=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,discard,time_offset=0x000000000000002c,check=relaxed,posixacl,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d46494c455f434b2c736d61636b66736861743d273a29232c736d61636b66736465663d636865636b3d72656c617865642c7356fd01a29c8aa6b2c26d61636b6673726f6f743d504c000000", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=utf8=0,obj_user=]&],\x00'], 0x26, 0x2e4, &(0x7f00000000c0)="$eJzs3U+LG2UYAPBndpNJ7CV78CSCA/agl9oteBR2kRbEvWjJQT1osC1IEoQWAq3iuCevXhQ8+AkEwQ/ixW/gBxC8aaEwMpOZTDbN/omYiu7vd+kz77zP+77z5qW7O7DPfvTidHwni3vHn/8aOxFvXIk4eP3ViL3yqvZlnHDwdQAA/2V/FkX8XsxtkpdERH97ywIAtqj++n9Or04b/rTtFQEA23b7vfffPjw6uvlulvXj1vSr2bD8yb78d37/8F58EpO4G9djEE8iqhcF3ajeFpThraIo8k5W2our03w2LDOnH/5cj3/4W0SVvx+D2KuaFm8bqvy3jm7uZ3Nxddp8p5GX67hSz39Q5t+IQTy/SD6Rf6PNb+bPY5jGKy8vrf9aDOKXj+PTmMSdahFt/hf7WfZm8c0fn31QTl3mJ/ls2Kv6tYrdZ/m5AAAAAAAAAAAAAAAAAAAAAADw/3atrp3Ti6p+T9lU1c+ZDXeflBfdyBrL9X3ypj5Q0gy0XB+oKIq8iO+b+jrXsywr6o5tfide6CwXFgQAAAAAAAAAAAAAAAAAAIDL68HDR+PRZHL3/tlBEhHn9RmPJk01gE5EPL4dcYGR1wYHSy0vxdmde/Wco8lkpw5P9ukst8Ru0yeJePho/NpxxPqRy4f4W4vfPHjuqTXXwQ8/bjpg//w+3fVz/RNBr96x5nSNR8nKHvbnQS+aln59SL5LI9oB01M+lKeCdNHy7TvzOetbRWxy/NK1twabbkJz/vMz+kRy+sIe19UzFk+RrD5FWu3q2vRuHSxtwsrZuNB5Pv3/inJdAAAAAAAAAAAAAAAAAADA9rS//bvm5vHKdTci0sXVTtHb+vIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Jlo//7/BkFeJ1+gcxr3H/zLjwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAl8FcAAAD//zLkUc0=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x8) 615.102805ms ago: executing program 3 (id=104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0xfff, 0x6}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x401001, 0xfffffffffffffffb}) 432.179959ms ago: executing program 2 (id=105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f0000000640)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x6}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nobh}, {@dax_inode}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x3004090, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 330.192352ms ago: executing program 3 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) 214.370655ms ago: executing program 3 (id=107): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, 0x0, 0x0) 155.340037ms ago: executing program 0 (id=108): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)={0x40, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b4f7a7d20d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=109): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8bd4cec) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 61.755294][ T5757] cgroup: Unknown subsys name 'net' [ 61.881911][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.235978][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.604502][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.608139][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.613742][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.626350][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.629036][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.633786][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.642236][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.656332][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.665765][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.673598][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.681808][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.688950][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.700629][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.700721][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.708417][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.722905][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.732834][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.740666][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.750071][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.754548][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.759728][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.765209][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.771836][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.791495][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.122731][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 65.191734][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 65.249745][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 65.325448][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.333734][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.341450][ T5770] bridge_slave_0: entered allmulticast mode [ 65.349414][ T5770] bridge_slave_0: entered promiscuous mode [ 65.379301][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.386495][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.393594][ T5770] bridge_slave_1: entered allmulticast mode [ 65.401076][ T5770] bridge_slave_1: entered promiscuous mode [ 65.408086][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.415193][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.422781][ T5771] bridge_slave_0: entered allmulticast mode [ 65.430016][ T5771] bridge_slave_0: entered promiscuous mode [ 65.438740][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.445799][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.453156][ T5771] bridge_slave_1: entered allmulticast mode [ 65.459941][ T5771] bridge_slave_1: entered promiscuous mode [ 65.466986][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 65.543087][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.554320][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.567270][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.591608][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.619501][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.627164][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.634284][ T5768] bridge_slave_0: entered allmulticast mode [ 65.641215][ T5768] bridge_slave_0: entered promiscuous mode [ 65.649773][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.657622][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.664988][ T5768] bridge_slave_1: entered allmulticast mode [ 65.672043][ T5768] bridge_slave_1: entered promiscuous mode [ 65.703043][ T5771] team0: Port device team_slave_0 added [ 65.712035][ T5770] team0: Port device team_slave_0 added [ 65.742934][ T5771] team0: Port device team_slave_1 added [ 65.750114][ T5770] team0: Port device team_slave_1 added [ 65.758114][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.770055][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.849114][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.856348][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.863435][ T5769] bridge_slave_0: entered allmulticast mode [ 65.870815][ T5769] bridge_slave_0: entered promiscuous mode [ 65.878959][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.885895][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.912097][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.924489][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.931717][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.958352][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.971559][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.979088][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.005333][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.019009][ T5768] team0: Port device team_slave_0 added [ 66.031604][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.039047][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.046620][ T5769] bridge_slave_1: entered allmulticast mode [ 66.053226][ T5769] bridge_slave_1: entered promiscuous mode [ 66.070007][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.077182][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.104925][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.126541][ T5768] team0: Port device team_slave_1 added [ 66.173280][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.209814][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.232508][ T5771] hsr_slave_0: entered promiscuous mode [ 66.239525][ T5771] hsr_slave_1: entered promiscuous mode [ 66.250719][ T5770] hsr_slave_0: entered promiscuous mode [ 66.257577][ T5770] hsr_slave_1: entered promiscuous mode [ 66.263576][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.272255][ T5770] Cannot create hsr debugfs directory [ 66.279763][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.286855][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.313129][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.333667][ T5769] team0: Port device team_slave_0 added [ 66.345228][ T5769] team0: Port device team_slave_1 added [ 66.351593][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.358923][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.384935][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.443881][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.451189][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.478147][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.512204][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.519469][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.545648][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.604024][ T5768] hsr_slave_0: entered promiscuous mode [ 66.611196][ T5768] hsr_slave_1: entered promiscuous mode [ 66.617423][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.624973][ T5768] Cannot create hsr debugfs directory [ 66.701468][ T5769] hsr_slave_0: entered promiscuous mode [ 66.707717][ T5769] hsr_slave_1: entered promiscuous mode [ 66.713887][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.722650][ T5769] Cannot create hsr debugfs directory [ 66.826914][ T5772] Bluetooth: hci2: command tx timeout [ 66.827232][ T5780] Bluetooth: hci1: command tx timeout [ 66.832571][ T5772] Bluetooth: hci3: command tx timeout [ 66.838374][ T5777] Bluetooth: hci0: command tx timeout [ 66.996049][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.021187][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.030950][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.041527][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.106384][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.120521][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.129837][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.153155][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.215644][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.235147][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.259419][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.271404][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.352806][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.362854][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.374243][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.384185][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.401430][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.440081][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.463478][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.470848][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.494314][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.501437][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.561760][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.602535][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.635634][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.664312][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.683397][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.690533][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.702120][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.709264][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.719473][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.726617][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.751726][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.758890][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.879456][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.934966][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.983445][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.990661][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.043137][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.050310][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.112788][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.240702][ T5771] veth0_vlan: entered promiscuous mode [ 68.271408][ T5771] veth1_vlan: entered promiscuous mode [ 68.359704][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.380069][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.418002][ T5771] veth0_macvtap: entered promiscuous mode [ 68.435069][ T5771] veth1_macvtap: entered promiscuous mode [ 68.456008][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.524156][ T5770] veth0_vlan: entered promiscuous mode [ 68.540039][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.555575][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.569747][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.579689][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591084][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.622238][ T5770] veth1_vlan: entered promiscuous mode [ 68.632377][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.682143][ T5768] veth0_vlan: entered promiscuous mode [ 68.713253][ T5770] veth0_macvtap: entered promiscuous mode [ 68.748327][ T5770] veth1_macvtap: entered promiscuous mode [ 68.768005][ T5768] veth1_vlan: entered promiscuous mode [ 68.784760][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.814171][ T5769] veth0_vlan: entered promiscuous mode [ 68.820495][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.844898][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.856743][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.869895][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.900518][ T5769] veth1_vlan: entered promiscuous mode [ 68.906651][ T5777] Bluetooth: hci1: command tx timeout [ 68.912081][ T5780] Bluetooth: hci3: command tx timeout [ 68.917649][ T5777] Bluetooth: hci2: command tx timeout [ 68.923063][ T5777] Bluetooth: hci0: command tx timeout [ 68.930150][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.941064][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.954534][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.975414][ T5768] veth0_macvtap: entered promiscuous mode [ 68.999087][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.010969][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.021526][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030833][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.044340][ T5768] veth1_macvtap: entered promiscuous mode [ 69.050391][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.059250][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.094069][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.105556][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.115690][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.126364][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.138027][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.150730][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.161805][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.171950][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.182451][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.193731][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.233640][ T5769] veth0_macvtap: entered promiscuous mode [ 69.253744][ T5769] veth1_macvtap: entered promiscuous mode [ 69.265753][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.278567][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.296301][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.316153][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.392711][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.406542][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.431000][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.448552][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.459643][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.471031][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.481955][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.496596][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.508194][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.536002][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.548402][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.558700][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.586565][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.599645][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.610524][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.622644][ T5834] syz.0.6[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 69.634483][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.678749][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.691032][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.729952][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.743450][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.746725][ T5834] loop0: detected capacity change from 0 to 4096 [ 69.752717][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.777057][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.829720][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.839037][ T5834] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 69.854055][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.004046][ T3409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.024810][ T3409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.135178][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.138374][ T5836] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 70.157311][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.199871][ T5836] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.294873][ T5835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.299463][ T3409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.321152][ T3409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.810839][ T5845] loop2: detected capacity change from 0 to 32768 [ 70.828119][ T5845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (5845) [ 70.836986][ T5836] syz.1.2 (5836) used greatest stack depth: 20264 bytes left [ 70.881600][ T5845] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.913989][ T5845] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 70.932050][ T5845] BTRFS info (device loop2): using free space tree [ 70.987156][ T5777] Bluetooth: hci3: command tx timeout [ 70.987584][ T5772] Bluetooth: hci2: command tx timeout [ 70.993685][ T5777] Bluetooth: hci1: command tx timeout [ 70.998532][ T5780] Bluetooth: hci0: command tx timeout [ 71.075795][ T5845] BTRFS info (device loop2): enabling ssd optimizations [ 71.104602][ T5845] BTRFS info (device loop2): auto enabling async discard [ 71.329004][ T5871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.476935][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.483541][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.543871][ T5877] loop0: detected capacity change from 0 to 128 [ 71.609623][ T5877] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.629427][ T5769] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.687510][ T5877] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.893165][ T28] Process accounting resumed [ 71.946443][ T28] Process accounting resumed [ 71.958050][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.226009][ T5896] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 72.321452][ T5896] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.374314][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.497494][ T5904] loop0: detected capacity change from 0 to 4096 [ 73.067542][ T5772] Bluetooth: hci2: command tx timeout [ 73.073003][ T5772] Bluetooth: hci0: command tx timeout [ 73.078550][ T5780] Bluetooth: hci1: command tx timeout [ 73.083607][ T5777] Bluetooth: hci3: command tx timeout [ 73.536357][ T5939] loop0: detected capacity change from 0 to 16 [ 73.557859][ T5939] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 73.795736][ T5948] loop0: detected capacity change from 0 to 512 [ 73.829479][ T5948] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.44: corrupted in-inode xattr: invalid ea_ino [ 73.845071][ T5948] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.44: couldn't read orphan inode 15 (err -117) [ 73.864795][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.957060][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.019762][ T1896] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.046298][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.164247][ T5943] loop3: detected capacity change from 0 to 32768 [ 74.202055][ T5943] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.216323][ T1896] usb 3-1: Using ep0 maxpacket: 32 [ 74.226355][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 74.234481][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 74.243225][ T1896] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.254967][ T8] usb 2-1: config 0 has no interface number 0 [ 74.261237][ T1896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.276170][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 74.290364][ T1896] usb 3-1: config 0 descriptor?? [ 74.296433][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.304494][ T8] usb 2-1: Product: syz [ 74.310281][ T8] usb 2-1: Manufacturer: syz [ 74.317247][ T8] usb 2-1: SerialNumber: syz [ 74.335947][ T8] usb 2-1: config 0 descriptor?? [ 74.345659][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 74.383172][ T5943] XFS (loop3): Ending clean mount [ 74.388443][ T5828] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.525529][ T1896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 74.530767][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.540040][ T1896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.573835][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 74.579548][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.586657][ T1896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 74.604337][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.616597][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.625629][ T1896] usb 3-1: media controller created [ 74.631001][ T5828] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 74.642570][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 74.645755][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.703320][ T5828] usb 1-1: config 0 descriptor?? [ 74.793766][ T1896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.887844][ T1896] az6027: usb out operation failed. (-71) [ 74.900024][ T1896] az6027: usb out operation failed. (-71) [ 74.905882][ T1896] stb0899_attach: Driver disabled by Kconfig [ 74.913650][ T1896] az6027: no front-end attached [ 74.913650][ T1896] [ 74.936761][ T1896] az6027: usb out operation failed. (-71) [ 74.942930][ T1896] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 74.969605][ T1896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 75.019742][ T1896] dvb-usb: schedule remote query interval to 400 msecs. [ 75.037474][ T1896] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 75.078425][ T1896] usb 3-1: USB disconnect, device number 2 [ 75.103413][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 75.133823][ T5827] usb 2-1: USB disconnect, device number 2 [ 75.138371][ T5828] steelseries 0003:1038:1410.0001: item fetching failed at offset 5/7 [ 75.152978][ T5966] loop3: detected capacity change from 0 to 4096 [ 75.165374][ T5828] steelseries 0003:1038:1410.0001: parse failed [ 75.168392][ T5966] ======================================================= [ 75.168392][ T5966] WARNING: The mand mount option has been deprecated and [ 75.168392][ T5966] and is ignored by this kernel. Remove the mand [ 75.168392][ T5966] option from the mount to silence this warning. [ 75.168392][ T5966] ======================================================= [ 75.180935][ T5828] steelseries: probe of 0003:1038:1410.0001 failed with error -22 [ 75.207455][ T5827] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 75.239057][ T5827] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 75.257512][ T5966] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 75.282669][ T5827] quatech2 2-1:0.51: device disconnected [ 75.292406][ T1896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 75.377303][ T5828] usb 1-1: USB disconnect, device number 2 [ 75.397232][ T5966] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.406917][ T5966] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 75.621215][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.053016][ T5984] loop0: detected capacity change from 0 to 512 [ 76.119317][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.173622][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.336277][ T5773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.546328][ T5828] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.553901][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 76.563304][ T5773] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 76.586194][ T5773] usb 3-1: config 0 has no interface number 0 [ 76.592355][ T5773] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 76.612394][ T5773] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 76.627484][ T5773] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 76.638095][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.646514][ T5773] usb 3-1: Product: syz [ 76.650910][ T5773] usb 3-1: Manufacturer: syz [ 76.655616][ T5773] usb 3-1: SerialNumber: syz [ 76.664084][ T5773] usb 3-1: config 0 descriptor?? [ 76.680415][ T5987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.738874][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.750756][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.761221][ T5828] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 76.770675][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.785383][ T5828] usb 1-1: config 0 descriptor?? [ 77.088441][ T5773] usb 3-1: USB disconnect, device number 3 [ 77.121587][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.231216][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.244062][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.253190][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.272365][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.280658][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.292008][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.299262][ T5828] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 77.315130][ T5828] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 77.546907][ T6010] loop3: detected capacity change from 0 to 2048 [ 77.602384][ T6011] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.722501][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.734409][ T5828] usb 1-1: USB disconnect, device number 3 [ 77.779630][ T6002] loop1: detected capacity change from 0 to 32768 [ 77.851148][ T6002] loop1: p9 p11 p16 [ 77.875102][ T6016] process 'syz.3.67' launched './file0' with NULL argv: empty string added [ 78.046065][ T5759] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.073856][ T6019] loop2: detected capacity change from 0 to 4096 [ 78.089872][ T6019] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 78.163360][ T6019] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 78.169535][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 78.178282][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 78.183378][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 78.216557][ T6019] ntfs3: loop2: Failed to load $Extend (-22). [ 78.216623][ T6021] loop3: detected capacity change from 0 to 4096 [ 78.222671][ T6019] ntfs3: loop2: Failed to initialize $Extend. [ 78.271852][ T6021] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 78.328955][ T6019] ntfs3: loop2: ino=0, attr_set_size [ 78.364080][ T6019] ntfs3: loop2: ino=0, attr_set_size [ 78.397699][ T6019] ntfs3: loop2: ino=0, attr_set_size [ 78.539755][ T6021] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 78.949518][ T6040] loop1: detected capacity change from 0 to 256 [ 79.033784][ T6040] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 79.193763][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 79.752319][ T6050] loop3: detected capacity change from 0 to 32768 [ 79.773755][ T6050] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 79.789779][ T6050] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 79.820619][ T6050] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 79.869859][ T6050] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 80.001922][ T6063] loop2: detected capacity change from 0 to 1024 [ 80.172695][ T3456] hfsplus: b-tree write err: -5, ino 25 [ 80.188308][ T3456] hfsplus: b-tree write err: -5, ino 4 [ 80.201150][ T3456] hfsplus: b-tree write err: -5, ino 2 [ 80.528257][ T6076] bond0: entered promiscuous mode [ 80.539813][ T6076] bond_slave_0: entered promiscuous mode [ 80.557334][ T6076] bond_slave_1: entered promiscuous mode [ 80.568189][ T6076] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 80.585897][ T6076] batadv0: entered promiscuous mode [ 80.602956][ T6076] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.793481][ T6084] loop0: detected capacity change from 0 to 512 [ 80.819895][ T6084] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.626858][ C0] icmp: detected local route for 10.1.1.1 during ICMP sending, src 10.1.1.2 [ 81.731591][ T23] cfg80211: failed to load regulatory.db [ 82.071792][ T6105] loop3: detected capacity change from 0 to 512 [ 82.620073][ T6112] loop2: detected capacity change from 0 to 512 [ 82.689591][ T6112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.736085][ T6112] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.806996][ T6112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 82.815052][ T6112] System zones: 1-12 [ 82.826957][ T6112] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.839823][ T6112] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.105: invalid indirect mapped block 2 (level 2) [ 82.909595][ T3409] wlan1: Trigger new scan to find an IBSS to join [ 82.916596][ T6112] EXT4-fs (loop2): Remounting filesystem read-only [ 82.994052][ T6112] EXT4-fs (loop2): 1 truncate cleaned up [ 83.002141][ T3456] ------------[ cut here ]------------ [ 83.007977][ T3456] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 83.019827][ T3456] WARNING: CPU: 0 PID: 3456 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 83.027958][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 83.029864][ T3456] Modules linked in: [ 83.046162][ T3456] CPU: 0 PID: 3456 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 83.053808][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.063922][ T3456] Workqueue: events_unbound cfg80211_wiphy_work [ 83.070233][ T3456] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 83.076535][ T3456] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b b2 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 83.096192][ T3456] RSP: 0018:ffffc9000cff7380 EFLAGS: 00010246 [ 83.102289][ T3456] RAX: 031cadf115562700 RBX: 000000000000000c RCX: ffff88802d74bc00 [ 83.110321][ T3456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 83.118339][ T3456] RBP: 0000000000000084 R08: ffffc9000cff6f87 R09: 1ffff920019fedf0 [ 83.126353][ T3456] R10: dffffc0000000000 R11: fffff520019fedf1 R12: 0000000000000040 [ 83.134341][ T3456] R13: dffffc0000000000 R14: ffff88805bafb358 R15: ffff88823bd76f28 [ 83.142401][ T3456] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 83.151377][ T3456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.158010][ T3456] CR2: 00007fb501b456b8 CR3: 000000001c702000 CR4: 00000000003506f0 [ 83.166001][ T3456] Call Trace: [ 83.169334][ T3456] [ 83.172289][ T3456] ? mark_lock+0x94/0x320 [ 83.176678][ T3456] rate_control_send_low+0x194/0x790 [ 83.181988][ T3456] rate_control_get_rate+0x20b/0x5d0 [ 83.187331][ T3456] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 83.193006][ T3456] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 83.199035][ T3456] ? __lock_acquire+0x1273/0x7d40 [ 83.204084][ T3456] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 83.210207][ T3456] invoke_tx_handlers_late+0xb6/0x1810 [ 83.215703][ T3456] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 83.221585][ T3456] ieee80211_tx+0x2d8/0x460 [ 83.226146][ T3456] ? ieee80211_skb_resize+0x630/0x630 [ 83.231553][ T3456] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 83.237058][ T3456] ? __bpf_trace_tasklet+0x160/0x160 [ 83.242385][ T3456] ? ieee80211_xmit+0x310/0x3f0 [ 83.247292][ T3456] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 83.253299][ T3456] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 83.259168][ T3456] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 83.265519][ T3456] ieee80211_scan_state_send_probe+0x560/0x930 [ 83.271752][ T3456] ieee80211_scan_work+0x4e9/0x1c40 [ 83.277064][ T3456] cfg80211_wiphy_work+0x225/0x260 [ 83.282206][ T3456] ? process_scheduled_works+0x96f/0x15d0 [ 83.287983][ T3456] process_scheduled_works+0xa5d/0x15d0 [ 83.293597][ T3456] ? worker_attach_to_pool+0x380/0x380 [ 83.299105][ T3456] ? assign_work+0x3d2/0x5d0 [ 83.303728][ T3456] worker_thread+0xa55/0xfc0 [ 83.308410][ T3456] kthread+0x2fa/0x390 [ 83.312497][ T3456] ? pr_cont_work+0x560/0x560 [ 83.317252][ T3456] ? kthread_blkcg+0xd0/0xd0 [ 83.321858][ T3456] ret_from_fork+0x48/0x80 [ 83.326327][ T3456] ? kthread_blkcg+0xd0/0xd0 [ 83.330940][ T3456] ret_from_fork_asm+0x11/0x20 [ 83.335742][ T3456] [ 83.338818][ T3456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.346117][ T3456] CPU: 0 PID: 3456 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 83.353745][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.363790][ T3456] Workqueue: events_unbound cfg80211_wiphy_work [ 83.370033][ T3456] Call Trace: [ 83.373302][ T3456] [ 83.376222][ T3456] dump_stack_lvl+0x18c/0x250 [ 83.380894][ T3456] ? show_regs_print_info+0x20/0x20 [ 83.386083][ T3456] ? load_image+0x420/0x420 [ 83.390600][ T3456] panic+0x2dc/0x730 [ 83.394492][ T3456] ? bpf_jit_dump+0xd0/0xd0 [ 83.398993][ T3456] ? ret_from_fork_asm+0x11/0x20 [ 83.403927][ T3456] __warn+0x2e0/0x470 [ 83.408010][ T3456] ? __rate_control_send_low+0x635/0x880 [ 83.413648][ T3456] ? __rate_control_send_low+0x635/0x880 [ 83.419282][ T3456] report_bug+0x2be/0x4f0 [ 83.423610][ T3456] ? __rate_control_send_low+0x635/0x880 [ 83.429240][ T3456] ? __rate_control_send_low+0x635/0x880 [ 83.434866][ T3456] ? __rate_control_send_low+0x637/0x880 [ 83.440490][ T3456] handle_bug+0xcf/0x120 [ 83.444725][ T3456] exc_invalid_op+0x1a/0x50 [ 83.449217][ T3456] asm_exc_invalid_op+0x1a/0x20 [ 83.454059][ T3456] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 83.460290][ T3456] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 a0 04 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b b2 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 83.479886][ T3456] RSP: 0018:ffffc9000cff7380 EFLAGS: 00010246 [ 83.485944][ T3456] RAX: 031cadf115562700 RBX: 000000000000000c RCX: ffff88802d74bc00 [ 83.493904][ T3456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 83.501864][ T3456] RBP: 0000000000000084 R08: ffffc9000cff6f87 R09: 1ffff920019fedf0 [ 83.509824][ T3456] R10: dffffc0000000000 R11: fffff520019fedf1 R12: 0000000000000040 [ 83.517784][ T3456] R13: dffffc0000000000 R14: ffff88805bafb358 R15: ffff88823bd76f28 [ 83.525760][ T3456] ? mark_lock+0x94/0x320 [ 83.530089][ T3456] rate_control_send_low+0x194/0x790 [ 83.535372][ T3456] rate_control_get_rate+0x20b/0x5d0 [ 83.540650][ T3456] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 83.546285][ T3456] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 83.552254][ T3456] ? __lock_acquire+0x1273/0x7d40 [ 83.557270][ T3456] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 83.563333][ T3456] invoke_tx_handlers_late+0xb6/0x1810 [ 83.568792][ T3456] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 83.574597][ T3456] ieee80211_tx+0x2d8/0x460 [ 83.579093][ T3456] ? ieee80211_skb_resize+0x630/0x630 [ 83.584465][ T3456] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 83.589913][ T3456] ? __bpf_trace_tasklet+0x160/0x160 [ 83.595189][ T3456] ? ieee80211_xmit+0x310/0x3f0 [ 83.600032][ T3456] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 83.606000][ T3456] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 83.611801][ T3456] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 83.618119][ T3456] ieee80211_scan_state_send_probe+0x560/0x930 [ 83.624278][ T3456] ieee80211_scan_work+0x4e9/0x1c40 [ 83.629500][ T3456] cfg80211_wiphy_work+0x225/0x260 [ 83.634612][ T3456] ? process_scheduled_works+0x96f/0x15d0 [ 83.640327][ T3456] process_scheduled_works+0xa5d/0x15d0 [ 83.645888][ T3456] ? worker_attach_to_pool+0x380/0x380 [ 83.651345][ T3456] ? assign_work+0x3d2/0x5d0 [ 83.655929][ T3456] worker_thread+0xa55/0xfc0 [ 83.660527][ T3456] kthread+0x2fa/0x390 [ 83.664579][ T3456] ? pr_cont_work+0x560/0x560 [ 83.669248][ T3456] ? kthread_blkcg+0xd0/0xd0 [ 83.673823][ T3456] ret_from_fork+0x48/0x80 [ 83.678228][ T3456] ? kthread_blkcg+0xd0/0xd0 [ 83.682804][ T3456] ret_from_fork_asm+0x11/0x20 [ 83.687569][ T3456] [ 83.690905][ T3456] Kernel Offset: disabled [ 83.695280][ T3456] Rebooting in 86400 seconds..