last executing test programs: 7.230964345s ago: executing program 3 (id=41): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaabaa0800e0"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 4.691029325s ago: executing program 3 (id=49): r0 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)={0x40, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="a90500000000746400", 0x9}, {0x0}], 0x2}}], 0x1, 0x40000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.193796313s ago: executing program 0 (id=54): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x9) 4.052509745s ago: executing program 0 (id=56): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 4.001626826s ago: executing program 3 (id=57): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaabaa0800e0"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 3.967472307s ago: executing program 1 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0xd000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x2, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xd, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38, 0x4}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.591438373s ago: executing program 1 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 3.397883346s ago: executing program 1 (id=61): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xa00440, &(0x7f0000000800)={[{@sysvgroups}, {@resuid}, {@block_validity}]}, 0x0, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.275070774s ago: executing program 0 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.347997348s ago: executing program 2 (id=63): capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) 1.182229181s ago: executing program 2 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000ffdbdf252b00000008000300", @ANYBLOB="0a0034000101011101010000080026"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) 1.181602091s ago: executing program 3 (id=65): r0 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)={0x40, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="a90500000000746400", 0x9}, {0x0}], 0x2}}], 0x1, 0x40000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.169460701s ago: executing program 0 (id=66): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x9) 1.168692201s ago: executing program 1 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0xd000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x2, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xd, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38, 0x4}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.097166072s ago: executing program 0 (id=68): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x12b) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182) copy_file_range(r2, 0x0, r0, 0x0, 0xfffffbffa003e45c, 0x700000000000000) 938.370555ms ago: executing program 2 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 762.086018ms ago: executing program 2 (id=70): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 716.092848ms ago: executing program 2 (id=71): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 704.189998ms ago: executing program 1 (id=72): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_abort}, {@minixdf}]}, 0x3, 0x50c, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r3, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4804) 426.010933ms ago: executing program 3 (id=73): capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) 334.575444ms ago: executing program 3 (id=74): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaabaa0800e0"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 221.556216ms ago: executing program 1 (id=75): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 61.750839ms ago: executing program 0 (id=76): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getpriority(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x38}}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xa00440, &(0x7f0000000800)={[{@sysvgroups}, {@resuid}, {@block_validity}]}, 0x0, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 0s ago: executing program 2 (id=77): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 74.760032][ T5777] cgroup: Unknown subsys name 'net' [ 74.929319][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.567184][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.777381][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.788786][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.798784][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.807941][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.815825][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.818020][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.824556][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.834450][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.845266][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.850667][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.854076][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.868563][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.877197][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.884634][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.905407][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.906853][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.912731][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.921015][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.927947][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.944191][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.944364][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.952829][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.971071][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.978815][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.389094][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.433106][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 79.628551][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.636079][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.644295][ T5788] bridge_slave_0: entered allmulticast mode [ 79.652081][ T5788] bridge_slave_0: entered promiscuous mode [ 79.687030][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.694525][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.702331][ T5788] bridge_slave_1: entered allmulticast mode [ 79.709833][ T5788] bridge_slave_1: entered promiscuous mode [ 79.718515][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.774040][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.782080][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.789248][ T5787] bridge_slave_0: entered allmulticast mode [ 79.796591][ T5787] bridge_slave_0: entered promiscuous mode [ 79.828752][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 79.846664][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.854055][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.861873][ T5787] bridge_slave_1: entered allmulticast mode [ 79.869707][ T5787] bridge_slave_1: entered promiscuous mode [ 79.880183][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.893478][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.994132][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.007628][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.079899][ T5788] team0: Port device team_slave_0 added [ 80.097935][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.105329][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.114132][ T5786] bridge_slave_0: entered allmulticast mode [ 80.121360][ T5786] bridge_slave_0: entered promiscuous mode [ 80.129244][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.136473][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.143723][ T5786] bridge_slave_1: entered allmulticast mode [ 80.151109][ T5786] bridge_slave_1: entered promiscuous mode [ 80.161148][ T5787] team0: Port device team_slave_0 added [ 80.169900][ T5788] team0: Port device team_slave_1 added [ 80.217626][ T5787] team0: Port device team_slave_1 added [ 80.277854][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.285023][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.311913][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.326431][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.333827][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.360359][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.371900][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.379100][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.386935][ T5789] bridge_slave_0: entered allmulticast mode [ 80.394212][ T5789] bridge_slave_0: entered promiscuous mode [ 80.402970][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.410141][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.417431][ T5789] bridge_slave_1: entered allmulticast mode [ 80.424645][ T5789] bridge_slave_1: entered promiscuous mode [ 80.436098][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.500104][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.523905][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.530996][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.559693][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.589799][ T5788] hsr_slave_0: entered promiscuous mode [ 80.596648][ T5788] hsr_slave_1: entered promiscuous mode [ 80.629979][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.637244][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.663428][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.685306][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.698295][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.711093][ T5786] team0: Port device team_slave_0 added [ 80.721308][ T5786] team0: Port device team_slave_1 added [ 80.804243][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.811895][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.838291][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.852848][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.859843][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.885864][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.909384][ T5789] team0: Port device team_slave_0 added [ 80.919081][ T5789] team0: Port device team_slave_1 added [ 80.920785][ T5796] Bluetooth: hci2: command tx timeout [ 80.943897][ T5787] hsr_slave_0: entered promiscuous mode [ 80.950335][ T5787] hsr_slave_1: entered promiscuous mode [ 80.957263][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.965236][ T5787] Cannot create hsr debugfs directory [ 80.991270][ T5796] Bluetooth: hci1: command tx timeout [ 80.991291][ T5792] Bluetooth: hci0: command tx timeout [ 81.018169][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.025511][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.051471][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.071102][ T5796] Bluetooth: hci3: command tx timeout [ 81.098623][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.106097][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.133371][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.193238][ T5786] hsr_slave_0: entered promiscuous mode [ 81.199902][ T5786] hsr_slave_1: entered promiscuous mode [ 81.206436][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.215105][ T5786] Cannot create hsr debugfs directory [ 81.318318][ T5789] hsr_slave_0: entered promiscuous mode [ 81.325052][ T5789] hsr_slave_1: entered promiscuous mode [ 81.332170][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.339763][ T5789] Cannot create hsr debugfs directory [ 81.637901][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.661989][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.675053][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.705995][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.805826][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.836146][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.854823][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.874004][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.983135][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.026444][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.062539][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.074396][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.174101][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.201394][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.215883][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.247531][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.267784][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.340116][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.373863][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.381313][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.405729][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.427862][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.435085][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.498307][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.541163][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.548381][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.583013][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.590185][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.630785][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.705120][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.759778][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.767067][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.811600][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.818793][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.846704][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.899994][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.966543][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.973798][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.992569][ T5796] Bluetooth: hci2: command tx timeout [ 83.014526][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.059257][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.066513][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.071226][ T5796] Bluetooth: hci1: command tx timeout [ 83.079186][ T5796] Bluetooth: hci0: command tx timeout [ 83.161291][ T5796] Bluetooth: hci3: command tx timeout [ 83.184416][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.318343][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.351929][ T5787] veth0_vlan: entered promiscuous mode [ 83.415842][ T5787] veth1_vlan: entered promiscuous mode [ 83.504250][ T5788] veth0_vlan: entered promiscuous mode [ 83.543528][ T5787] veth0_macvtap: entered promiscuous mode [ 83.575894][ T5787] veth1_macvtap: entered promiscuous mode [ 83.588033][ T5788] veth1_vlan: entered promiscuous mode [ 83.644179][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.659433][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.686913][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.701129][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.710256][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.724083][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.733450][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.792835][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.848504][ T5788] veth0_macvtap: entered promiscuous mode [ 83.863562][ T5788] veth1_macvtap: entered promiscuous mode [ 83.932988][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.944669][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.959617][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.974662][ T5786] veth0_vlan: entered promiscuous mode [ 83.994973][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.007783][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.020619][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.054658][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.062159][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.073228][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.079163][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.090214][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.100418][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.125023][ T5789] veth0_vlan: entered promiscuous mode [ 84.142868][ T5786] veth1_vlan: entered promiscuous mode [ 84.200038][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.208962][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.222667][ T5789] veth1_vlan: entered promiscuous mode [ 84.252423][ T5786] veth0_macvtap: entered promiscuous mode [ 84.317889][ T5786] veth1_macvtap: entered promiscuous mode [ 84.375434][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.385141][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.409412][ T5789] veth0_macvtap: entered promiscuous mode [ 84.439250][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.456162][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.466902][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.483557][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.498016][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.517917][ T5880] syz.2.3[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.559339][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.577744][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.602884][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.620097][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.644859][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.665390][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.679237][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.705273][ T5789] veth1_macvtap: entered promiscuous mode [ 84.778689][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.804375][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819019][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.831705][ T5880] loop2: detected capacity change from 0 to 32768 [ 84.836832][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.840816][ T5880] ======================================================= [ 84.840816][ T5880] WARNING: The mand mount option has been deprecated and [ 84.840816][ T5880] and is ignored by this kernel. Remove the mand [ 84.840816][ T5880] option from the mount to silence this warning. [ 84.840816][ T5880] ======================================================= [ 84.933942][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.955270][ T5880] JBD2: Ignoring recovery information on journal [ 84.983089][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.995810][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.006521][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.020814][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.031521][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.044556][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.057551][ T5880] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.071371][ T5796] Bluetooth: hci2: command tx timeout [ 85.096755][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.129030][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.151306][ T5796] Bluetooth: hci1: command tx timeout [ 85.153572][ T5792] Bluetooth: hci0: command tx timeout [ 85.170228][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.187246][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.198034][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.213213][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.227765][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.244560][ T5792] Bluetooth: hci3: command tx timeout [ 85.272728][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.275682][ T5885] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 85.281997][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.307744][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.317457][ T5885] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.317473][ T5885] OCFS2: File system is now read-only. [ 85.317498][ T5885] (syz.2.3,5885,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 85.317525][ T5885] (syz.2.3,5885,0):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30 [ 85.317546][ T5885] (syz.2.3,5885,0):ocfs2_reserve_clusters_with_limit:1202 ERROR: status = -30 [ 85.317658][ T5885] (syz.2.3,5885,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 85.317763][ T5885] (syz.2.3,5885,0):ocfs2_block_group_alloc:675 ERROR: status = -30 [ 85.317794][ T5885] (syz.2.3,5885,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 85.317815][ T5885] (syz.2.3,5885,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 85.317837][ T5885] (syz.2.3,5885,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 85.317859][ T5885] (syz.2.3,5885,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 85.317946][ T5885] (syz.2.3,5885,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 85.318106][ T5885] (syz.2.3,5885,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 85.318132][ T5885] (syz.2.3,5885,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 85.336160][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.343566][ T5885] (syz.2.3,5885,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 85.421471][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.430358][ T5885] (syz.2.3,5885,0):ocfs2_mknod:298 ERROR: status = -30 [ 85.500099][ T5885] (syz.2.3,5885,1):ocfs2_mknod:502 ERROR: status = -30 [ 85.514969][ T5885] (syz.2.3,5885,1):ocfs2_create:676 ERROR: status = -30 [ 85.580524][ T525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.596105][ T525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.627790][ T5885] syz.2.3 (5885) used greatest stack depth: 17168 bytes left [ 85.666676][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.669084][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 85.681664][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 85.692232][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.704499][ T5843] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.742785][ T5843] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 85.749541][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.760937][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.772122][ T5843] usb 2-1: Product: syz [ 85.776352][ T5843] usb 2-1: Manufacturer: syz [ 85.785835][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.802535][ T5843] usb 2-1: SerialNumber: syz [ 85.834054][ T525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.849188][ T5843] usb 2-1: config 0 descriptor?? [ 85.877700][ T525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284374][ T5890] tipc: Enabling of bearer rejected, failed to enable media [ 86.472630][ T5890] syzkaller0: entered promiscuous mode [ 86.492808][ T5890] syzkaller0: entered allmulticast mode [ 86.575356][ T5892] loop2: detected capacity change from 0 to 32768 [ 86.584801][ T5843] gs_usb 2-1:0.0: Configuring for 3 interfaces [ 86.648433][ T5892] JBD2: Ignoring recovery information on journal [ 86.706528][ T5892] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.033992][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 87.042097][ T5897] loop0: detected capacity change from 0 to 32768 [ 87.137796][ T5897] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.152001][ T5792] Bluetooth: hci2: command tx timeout [ 87.232856][ T5792] Bluetooth: hci0: command tx timeout [ 87.232870][ T5796] Bluetooth: hci1: command tx timeout [ 87.311810][ T5792] Bluetooth: hci3: command tx timeout [ 87.365261][ T5897] XFS (loop0): Ending clean mount [ 87.400096][ T5897] XFS (loop0): Quotacheck needed: Please wait. [ 87.514087][ T5897] XFS (loop0): Quotacheck: Done. [ 87.600320][ T5914] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 88.160375][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.169118][ T5930] loop1: detected capacity change from 0 to 256 [ 88.652669][ T5932] loop0: detected capacity change from 0 to 512 [ 88.692198][ T5932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.711329][ T5932] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 89.505859][ T5843] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 89.520382][ T5910] tipc: Enabling of bearer rejected, failed to enable media [ 89.535147][ T5932] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.792424][ T5843] gs_usb: probe of 2-1:0.0 failed with error -71 [ 89.881336][ T5843] usb 2-1: USB disconnect, device number 2 [ 90.030429][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.087380][ T5947] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 90.160069][ T5946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.341434][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.361607][ T5792] Bluetooth: hci3: Dropping invalid advertising data [ 90.372413][ T5792] Bluetooth: hci3: Malformed LE Event: 0x02 [ 90.450758][ T5939] loop2: detected capacity change from 0 to 32768 [ 90.503816][ T5939] loop2: p1 p2 p3 [ 90.534955][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 90.547480][ T5843] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 90.574823][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.622412][ T5843] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.633699][ T5956] loop3: detected capacity change from 0 to 1024 [ 90.647422][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.666827][ T5843] usb 2-1: Product: syz [ 90.681232][ T5843] usb 2-1: Manufacturer: syz [ 90.701056][ T5843] usb 2-1: SerialNumber: syz [ 90.707518][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.750767][ T5956] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.044374][ T5843] usb 2-1: 0:2 : does not exist [ 91.068371][ T5843] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 91.202062][ T5967] loop0: detected capacity change from 0 to 2048 [ 91.207618][ T5843] usb 2-1: USB disconnect, device number 3 [ 91.257025][ T5967] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 91.342396][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.382018][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.693746][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.922246][ T5976] tipc: Started in network mode [ 91.947477][ T5976] tipc: Node identity ce96544cfe02, cluster identity 4711 [ 91.965576][ T5976] tipc: Enabled bearer , priority 0 [ 91.974462][ T9] cfg80211: failed to load regulatory.db [ 91.986653][ T5980] syzkaller0: entered promiscuous mode [ 91.997407][ T5980] syzkaller0: entered allmulticast mode [ 92.036167][ T5977] tipc: Enabling of bearer rejected, failed to enable media [ 92.064862][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 92.078453][ T5913] udevd[5913]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 92.094106][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.160958][ T5981] syzkaller0: entered promiscuous mode [ 92.167236][ T5981] syzkaller0: entered allmulticast mode [ 92.180449][ T5830] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 92.204140][ T5984] tipc: Resetting bearer [ 92.407381][ T5830] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 92.418407][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.431378][ T5830] usb 1-1: config 0 descriptor?? [ 92.860830][ T5830] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 92.886567][ T5830] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 92.897746][ T5830] asix: probe of 1-1:0.0 failed with error -71 [ 92.940164][ T5830] usb 1-1: USB disconnect, device number 2 [ 93.056819][ T5794] tipc: Node number set to 815027276 [ 93.731151][ T5794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.908892][ T5975] tipc: Resetting bearer [ 93.934264][ T5975] tipc: Disabling bearer [ 93.966541][ T5794] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 93.987887][ T5794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.015922][ T5794] usb 1-1: config 0 has no interface number 0 [ 94.036791][ T5794] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 94.071144][ T5794] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.116116][ T5794] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 94.134085][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.148305][ T5794] usb 1-1: Product: syz [ 94.152972][ T5794] usb 1-1: Manufacturer: syz [ 94.158989][ T5794] usb 1-1: SerialNumber: syz [ 94.172690][ T5794] usb 1-1: config 0 descriptor?? [ 94.240152][ T5998] loop1: detected capacity change from 0 to 1024 [ 94.276361][ T5992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.312050][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.325849][ T5998] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.362321][ T6000] loop3: detected capacity change from 0 to 512 [ 94.442817][ T6000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.496962][ T6000] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 94.635985][ T6006] loop2: detected capacity change from 0 to 256 [ 94.838353][ T5836] usb 1-1: USB disconnect, device number 3 [ 94.931284][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.106589][ T6008] loop3: detected capacity change from 0 to 32768 [ 95.125464][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 95.171506][ T5835] usb 3-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 95.199082][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.215330][ T5835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.225784][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.243153][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.249009][ T6008] JBD2: Ignoring recovery information on journal [ 95.267079][ T5835] usb 3-1: Product: syz [ 95.289860][ T5835] usb 3-1: Manufacturer: syz [ 95.316454][ T6008] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.321727][ T5835] usb 3-1: SerialNumber: syz [ 95.556765][ T5835] usb 3-1: 0:2 : does not exist [ 95.596578][ T5835] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 95.605776][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 95.710441][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 95.740767][ T5835] usb 3-1: USB disconnect, device number 2 [ 95.777758][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 95.885420][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.972751][ T6020] syzkaller0: entered promiscuous mode [ 95.994826][ T6020] syzkaller0: entered allmulticast mode [ 96.146225][ T6024] tipc: Enabled bearer , priority 0 [ 96.198903][ T6031] loop2: detected capacity change from 0 to 512 [ 96.247762][ T6031] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.267032][ T6031] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 96.322574][ T6029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.571925][ T6036] loop0: detected capacity change from 0 to 1024 [ 96.645946][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.661955][ T6036] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.006222][ T6027] syzkaller0: entered promiscuous mode [ 98.011931][ T6027] syzkaller0: entered allmulticast mode [ 98.038711][ T6033] tipc: Resetting bearer [ 98.066545][ T6022] tipc: Resetting bearer [ 98.141314][ T6022] tipc: Disabling bearer [ 98.393319][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.488664][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.53'. [ 98.825143][ T6060] loop0: detected capacity change from 0 to 256 [ 98.827912][ T6050] loop2: detected capacity change from 0 to 32768 [ 98.859467][ T6062] tipc: Enabling of bearer rejected, failed to enable media [ 98.921687][ T6050] JBD2: Ignoring recovery information on journal [ 98.973195][ T6062] syzkaller0: entered promiscuous mode [ 98.978840][ T6062] syzkaller0: entered allmulticast mode [ 99.070441][ T6050] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 99.181214][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.299134][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 99.391446][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 99.411591][ T5835] usb 1-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 99.432776][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.443544][ T6073] loop1: detected capacity change from 0 to 1024 [ 99.473902][ T5835] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.486866][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.511809][ T5835] usb 1-1: Product: syz [ 99.537866][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.541151][ T5835] usb 1-1: Manufacturer: syz [ 99.572547][ T6073] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.600333][ T5835] usb 1-1: SerialNumber: syz [ 99.639278][ T6078] loop2: detected capacity change from 0 to 512 [ 99.693091][ T6078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.759975][ T6078] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 99.857063][ T5835] usb 1-1: 0:2 : does not exist [ 99.913696][ T5835] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 99.981900][ T6076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.995811][ T5835] usb 1-1: USB disconnect, device number 4 [ 100.051942][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.400698][ T6090] tipc: Enabling of bearer rejected, failed to enable media [ 101.657199][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.756584][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 101.868353][ T6112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.160544][ T6119] loop2: detected capacity change from 0 to 256 [ 102.213153][ T6121] loop1: detected capacity change from 0 to 512 [ 102.271592][ T6121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.308362][ T6121] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 102.311817][ T6110] loop0: detected capacity change from 0 to 32768 [ 102.388811][ T6110] JBD2: Ignoring recovery information on journal [ 102.492498][ T6110] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.612174][ T6127] syzkaller0: entered promiscuous mode [ 102.617866][ T6127] syzkaller0: entered allmulticast mode [ 102.693733][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 102.848230][ T6132] loop0: detected capacity change from 0 to 1024 [ 102.928048][ T6132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.940377][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.956743][ T6132] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.125259][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 103.138369][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 103.147396][ T9] usb 2-1: config 0 has no interface number 0 [ 103.177785][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.194974][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.221038][ T9] usb 2-1: Product: syz [ 103.235633][ T9] usb 2-1: Manufacturer: syz [ 103.240295][ T9] usb 2-1: SerialNumber: syz [ 103.299745][ T9] usb 2-1: config 0 descriptor?? [ 103.327423][ T9] smsc95xx v2.0.0 [ 103.804714][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 103.816064][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.965534][ T1099] wlan1: Trigger new scan to find an IBSS to join [ 104.019907][ T56] ------------[ cut here ]------------ [ 104.030265][ T56] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 104.041711][ T56] WARNING: CPU: 0 PID: 56 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 104.051697][ T56] Modules linked in: [ 104.055703][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.6.100-syzkaller #0 [ 104.063824][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.073963][ T56] Workqueue: events_unbound cfg80211_wiphy_work [ 104.080258][ T56] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 104.086666][ T56] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 104.106404][ T56] RSP: 0018:ffffc90001427380 EFLAGS: 00010246 [ 104.112577][ T56] RAX: a8a62831da94fe00 RBX: 000000000000000c RCX: ffff8880186cda00 [ 104.120586][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 104.128617][ T56] RBP: 0000000000000084 R08: ffffc90001426f87 R09: 1ffff92000284df0 [ 104.136646][ T56] R10: dffffc0000000000 R11: fffff52000284df1 R12: 0000000000000040 [ 104.144698][ T56] R13: dffffc0000000000 R14: ffff88807cbb3358 R15: ffff88802f9587a8 [ 104.152731][ T56] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 104.161719][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.168343][ T56] CR2: 0000001b2d91bff8 CR3: 0000000062e0d000 CR4: 00000000003506f0 [ 104.176426][ T56] Call Trace: [ 104.179741][ T56] [ 104.182760][ T56] rate_control_send_low+0x194/0x790 [ 104.188099][ T56] rate_control_get_rate+0x20b/0x5c0 [ 104.193470][ T56] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 104.199202][ T56] ? ieee80211_tx_h_select_key+0x18f0/0x18f0 [ 104.205251][ T56] ? __lock_acquire+0x1260/0x7c80 [ 104.210319][ T56] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 104.216481][ T56] invoke_tx_handlers_late+0xb6/0x1810 [ 104.222032][ T56] ? ieee80211_tx_h_select_key+0x13cc/0x18f0 [ 104.228066][ T56] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 104.233949][ T56] ieee80211_tx+0x2ad/0x420 [ 104.238516][ T56] ? ieee80211_skb_resize+0x630/0x630 [ 104.243990][ T56] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 104.249511][ T56] ? __bpf_trace_tasklet+0x140/0x140 [ 104.254860][ T56] ? ieee80211_xmit+0x310/0x3f0 [ 104.259750][ T56] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 104.265792][ T56] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 104.271702][ T56] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 104.278068][ T56] ieee80211_scan_state_send_probe+0x560/0x930 [ 104.284311][ T56] ieee80211_scan_work+0x4e8/0x1c30 [ 104.289598][ T56] cfg80211_wiphy_work+0x225/0x260 [ 104.294788][ T56] ? process_scheduled_works+0x957/0x15b0 [ 104.300549][ T56] process_scheduled_works+0xa45/0x15b0 [ 104.306304][ T56] ? assign_work+0x400/0x400 [ 104.310998][ T56] ? assign_work+0x39e/0x400 [ 104.315623][ T56] worker_thread+0xa55/0xfc0 [ 104.320239][ T56] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 104.326210][ T56] ? _raw_spin_unlock+0x40/0x40 [ 104.331151][ T56] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 104.337116][ T56] kthread+0x2fa/0x390 [ 104.341266][ T56] ? pr_cont_work+0x560/0x560 [ 104.345988][ T56] ? kthread_blkcg+0xd0/0xd0 [ 104.350619][ T56] ret_from_fork+0x48/0x80 [ 104.355131][ T56] ? kthread_blkcg+0xd0/0xd0 [ 104.359767][ T56] ret_from_fork_asm+0x11/0x20 [ 104.364610][ T56] [ 104.367656][ T56] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.374933][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.6.100-syzkaller #0 [ 104.383000][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.393069][ T56] Workqueue: events_unbound cfg80211_wiphy_work [ 104.399364][ T56] Call Trace: [ 104.402650][ T56] [ 104.405579][ T56] dump_stack_lvl+0x16c/0x230 [ 104.410281][ T56] ? show_regs_print_info+0x20/0x20 [ 104.415488][ T56] ? load_image+0x3b0/0x3b0 [ 104.420026][ T56] panic+0x2c0/0x710 [ 104.423939][ T56] ? bpf_jit_dump+0xd0/0xd0 [ 104.428479][ T56] ? ret_from_fork_asm+0x11/0x20 [ 104.433461][ T56] __warn+0x2e0/0x470 [ 104.437453][ T56] ? __rate_control_send_low+0x635/0x880 [ 104.443097][ T56] ? __rate_control_send_low+0x635/0x880 [ 104.448756][ T56] report_bug+0x2be/0x4f0 [ 104.453139][ T56] ? __rate_control_send_low+0x635/0x880 [ 104.458778][ T56] ? __rate_control_send_low+0x635/0x880 [ 104.464425][ T56] ? __rate_control_send_low+0x637/0x880 [ 104.470099][ T56] handle_bug+0xcf/0x120 [ 104.474361][ T56] exc_invalid_op+0x1a/0x50 [ 104.478963][ T56] asm_exc_invalid_op+0x1a/0x20 [ 104.483834][ T56] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 104.490098][ T56] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 104.509716][ T56] RSP: 0018:ffffc90001427380 EFLAGS: 00010246 [ 104.515799][ T56] RAX: a8a62831da94fe00 RBX: 000000000000000c RCX: ffff8880186cda00 [ 104.523785][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 104.531759][ T56] RBP: 0000000000000084 R08: ffffc90001426f87 R09: 1ffff92000284df0 [ 104.539754][ T56] R10: dffffc0000000000 R11: fffff52000284df1 R12: 0000000000000040 [ 104.547759][ T56] R13: dffffc0000000000 R14: ffff88807cbb3358 R15: ffff88802f9587a8 [ 104.555774][ T56] rate_control_send_low+0x194/0x790 [ 104.561088][ T56] rate_control_get_rate+0x20b/0x5c0 [ 104.566401][ T56] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 104.572066][ T56] ? ieee80211_tx_h_select_key+0x18f0/0x18f0 [ 104.578068][ T56] ? __lock_acquire+0x1260/0x7c80 [ 104.583115][ T56] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 104.589206][ T56] invoke_tx_handlers_late+0xb6/0x1810 [ 104.594685][ T56] ? ieee80211_tx_h_select_key+0x13cc/0x18f0 [ 104.600696][ T56] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 104.606550][ T56] ieee80211_tx+0x2ad/0x420 [ 104.611083][ T56] ? ieee80211_skb_resize+0x630/0x630 [ 104.616488][ T56] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 104.621965][ T56] ? __bpf_trace_tasklet+0x140/0x140 [ 104.627266][ T56] ? ieee80211_xmit+0x310/0x3f0 [ 104.632134][ T56] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 104.638134][ T56] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 104.643962][ T56] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 104.650299][ T56] ieee80211_scan_state_send_probe+0x560/0x930 [ 104.656481][ T56] ieee80211_scan_work+0x4e8/0x1c30 [ 104.661718][ T56] cfg80211_wiphy_work+0x225/0x260 [ 104.666935][ T56] ? process_scheduled_works+0x957/0x15b0 [ 104.672676][ T56] process_scheduled_works+0xa45/0x15b0 [ 104.678256][ T56] ? assign_work+0x400/0x400 [ 104.682864][ T56] ? assign_work+0x39e/0x400 [ 104.687469][ T56] worker_thread+0xa55/0xfc0 [ 104.692075][ T56] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 104.697985][ T56] ? _raw_spin_unlock+0x40/0x40 [ 104.702850][ T56] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 104.708780][ T56] kthread+0x2fa/0x390 [ 104.712864][ T56] ? pr_cont_work+0x560/0x560 [ 104.717554][ T56] ? kthread_blkcg+0xd0/0xd0 [ 104.722161][ T56] ret_from_fork+0x48/0x80 [ 104.726594][ T56] ? kthread_blkcg+0xd0/0xd0 [ 104.731198][ T56] ret_from_fork_asm+0x11/0x20 [ 104.735991][ T56] [ 104.739306][ T56] Kernel Offset: disabled [ 104.743752][ T56] Rebooting in 86400 seconds..