last executing test programs: 4.705740578s ago: executing program 1 (id=10): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) 4.529585051s ago: executing program 1 (id=13): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 4.225566147s ago: executing program 1 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x4800) 3.920829653s ago: executing program 1 (id=17): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x2c, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3.681326597s ago: executing program 1 (id=19): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 3.346672704s ago: executing program 0 (id=22): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 3.272712496s ago: executing program 3 (id=23): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x40000000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x8, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.241767356s ago: executing program 0 (id=24): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$eJzs3U9sHFcZAPBv1pu1N0iu26ZpQKBajVRBIxLbq5IgITUghHyIUASXXq3Eaaxs0sp2kVshsgYKEidOqAcORcgcekIIIZUTopyRkLhw8j0SNw5GAhbNn12Pd7f2bmN7t+3vJ43nzb55733z7eyb/ZNoAvjUWn4lzrQiieVLN7bS7d2dRnN3p3G/U46I6YioRFTzVST1iOSDiOuRL/HZ9MGiu+TDxnnp0ftJ9Z33GvlWtViy/SuHteszcM9WxEx3Yyoi5vPif4butq+/bMn6ubXf30eUdONOE3axkzgYt3af1n5l5cjmw79ugYn1ML9u9pmLOBv51TV9HxDF7HD0zDB+h85NrdOLAwAAAE7KwM/yZU/sxV5sxezphAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDEl+z8CkWCqd8nwknfv/10r31K+NOdzH9PadbPWdJ8YdCAAAAAAAAAAcafuQuuf2Yi+2Yraz3U6y3/yfzzbOZX8/E2/ERqzGelyOrViJzdiM9ViMiLlSR7Wtlc3N9cX+lr+ItGW73X5YtFwa2HLpYFyt3kAH/UuDvp0AAAAAAAAA4FPrh7G8//s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMgiRiKl9ly7lOeS4q1YiYiYhaMt/dvTbWYI/Bn8YdAAAAAJy8erGeTf6XF9pJ9pn/fPa5fybeiAexGWuxGc1YjdvZdwH5p/7K31qN5u5O43669Hf89X+OFEfWY+TfPQweeSHb45lui+X4Vnw3LsV83Iz1WIvvxUpsxmrMxzez0kokMVd8ezG3u1OPTqz98V4/sHWzN7bnSuU0vgtZJPW4E2tZbJfjVq0TeqXY70JptD/UInpG3E6zk7xcGDJHt4t1ekQ/L9aTYS478jPdjCwUuU+z8WQ57/25H/E86R1pMSrd76DO7Y+SbvaONHzO/93ORcTZ4qE01z852ZyP+FXawUy0fpZudc6+84fnPOJLf//zzbuVB/fu3tm4NDmn0UfUe040Spl4dqhMNNNMtB4jEzOPE//xqRXZyGfR0WbL57O2s7EW347X4nasxtVYiMW4Fgvx1ViKRiyV8vrM4XnNXmuV0ea3i18sCuk16aela9OpmT64uX86pHl9spTX8kw3l9V1H9lrl7L01BBZSmoxOEv/GBhj9XNFIR3jR6Urzvj1ZCKbmzvRPX14Jn7133Sy3Wg+uLd+d+X1Icd7oVinz9PbB+fmXx/LAY2uONz0fHkqfbIiv2yUz5e07ulOXU++asUvLtWiswN1tchez3ndUa/UtKfz24N6yuueHThKI6u7UKo78C4nXotm910IABPs7Itna/VH9b/W363/uH63fmPmG9PXpj9fizN/qf5x6reV31S+lrwY78YPYnbckQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCfBxptv3VtpNlfXJ7AQlWPucHtgVScV+SO1yTj2j2th+rAz6ncRcUjz2odVfaF4ho4/5iS729hEpC6qpzDW9KAc3ug+Uo+odOOJiHsTcoM74CRc2bz/+pWNN9/68tr9lVdXX119sHTt6stXG19ZfHjlzlpzdSH/O+4ogZOw/zZg3JEAAAAAAAAAAAAAwzqN/94wYNikNYZjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6ell+JM61IYnHh8kK6vbvTaKZLp7y/ZzUiKhGRfD8i+SDieuRLzJW6Sw723p7qlF569P4vX3jnvcZ+X9XO/pWedr//V7s94lG0iiXmI2KqWB9teqj+bpX6a40YWC7pHmGasIudxMG4/T8AAP//kWUO3A==") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2.903679993s ago: executing program 0 (id=26): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.800316765s ago: executing program 3 (id=27): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0x1, 0x200, 0x8, 0x3ff, 0x6}) 2.725071136s ago: executing program 0 (id=28): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000015c0)="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", 0x7c2) 2.644281088s ago: executing program 3 (id=29): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0) 1.99360597s ago: executing program 3 (id=30): r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.906997262s ago: executing program 3 (id=31): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x4}}, 0x10, 0x0}, 0x0) 1.786144125s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x6, @string={0x6, 0x3, "016a44da"}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) 1.386860222s ago: executing program 1 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 946.084471ms ago: executing program 0 (id=35): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/53, 0x35) getdents(r0, 0xfffffffffffffffd, 0x58) 766.866995ms ago: executing program 0 (id=38): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0045b0f, &(0x7f0000000040)) 653.205077ms ago: executing program 2 (id=39): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 558.175579ms ago: executing program 2 (id=40): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 483.282361ms ago: executing program 2 (id=41): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x48}}, 0x0) 302.971854ms ago: executing program 2 (id=42): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 184.019896ms ago: executing program 2 (id=43): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 2 (id=44): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/65, 0x41}, 0x2}], 0x1, 0x40010001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 74.720831][ T5779] cgroup: Unknown subsys name 'net' [ 74.859902][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.544821][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.544303][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.555197][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.557415][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.563976][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.577980][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.586051][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.586096][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.601022][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.609774][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.618544][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.627066][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.634628][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.634817][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.642768][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.649592][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.657135][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.663865][ T5806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.673891][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.680089][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.685273][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.692773][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.705494][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.726629][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.734191][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.189924][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 79.267893][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 79.338749][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 79.396000][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.404503][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.411934][ T5801] bridge_slave_0: entered allmulticast mode [ 79.419235][ T5801] bridge_slave_0: entered promiscuous mode [ 79.461126][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.468776][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.476539][ T5801] bridge_slave_1: entered allmulticast mode [ 79.484594][ T5801] bridge_slave_1: entered promiscuous mode [ 79.526858][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 79.560596][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.567985][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.575944][ T5792] bridge_slave_0: entered allmulticast mode [ 79.583014][ T5792] bridge_slave_0: entered promiscuous mode [ 79.597211][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.609994][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.631794][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.639148][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.647382][ T5792] bridge_slave_1: entered allmulticast mode [ 79.654387][ T5792] bridge_slave_1: entered promiscuous mode [ 79.692830][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.700029][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.707799][ T5789] bridge_slave_0: entered allmulticast mode [ 79.715971][ T5789] bridge_slave_0: entered promiscuous mode [ 79.750435][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.757858][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.765281][ T5789] bridge_slave_1: entered allmulticast mode [ 79.772090][ T5789] bridge_slave_1: entered promiscuous mode [ 79.798000][ T5801] team0: Port device team_slave_0 added [ 79.818921][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.847335][ T5801] team0: Port device team_slave_1 added [ 79.869742][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.881454][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.916153][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.923517][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.930960][ T5790] bridge_slave_0: entered allmulticast mode [ 79.938485][ T5790] bridge_slave_0: entered promiscuous mode [ 79.960083][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.997822][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.005543][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.013184][ T5790] bridge_slave_1: entered allmulticast mode [ 80.020005][ T5790] bridge_slave_1: entered promiscuous mode [ 80.041450][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.048512][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.076340][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.102955][ T5792] team0: Port device team_slave_0 added [ 80.136440][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.143819][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.170081][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.185624][ T5789] team0: Port device team_slave_0 added [ 80.193258][ T5792] team0: Port device team_slave_1 added [ 80.201581][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.214479][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.240107][ T5789] team0: Port device team_slave_1 added [ 80.291349][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.298574][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.325972][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.360036][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.367579][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.394731][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.410189][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.417461][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.443664][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.464675][ T5790] team0: Port device team_slave_0 added [ 80.482980][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.490143][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.516547][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.549768][ T5790] team0: Port device team_slave_1 added [ 80.573640][ T5801] hsr_slave_0: entered promiscuous mode [ 80.580128][ T5801] hsr_slave_1: entered promiscuous mode [ 80.622761][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.629943][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.656395][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.672666][ T5792] hsr_slave_0: entered promiscuous mode [ 80.679556][ T5792] hsr_slave_1: entered promiscuous mode [ 80.686040][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.694409][ T5792] Cannot create hsr debugfs directory [ 80.721089][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.728333][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.744182][ T5806] Bluetooth: hci0: command tx timeout [ 80.755426][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.760800][ T50] Bluetooth: hci3: command tx timeout [ 80.824122][ T5789] hsr_slave_0: entered promiscuous mode [ 80.830463][ T5789] hsr_slave_1: entered promiscuous mode [ 80.833797][ T50] Bluetooth: hci1: command tx timeout [ 80.837024][ T5806] Bluetooth: hci2: command tx timeout [ 80.848060][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.855998][ T5789] Cannot create hsr debugfs directory [ 80.879096][ T5790] hsr_slave_0: entered promiscuous mode [ 80.885919][ T5790] hsr_slave_1: entered promiscuous mode [ 80.892038][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.900199][ T5790] Cannot create hsr debugfs directory [ 81.297426][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.311707][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.326511][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.338667][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.418997][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.429088][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.441755][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.465352][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.529304][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.562707][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.577405][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.588156][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.666713][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.677976][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.691916][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.702252][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.812032][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.888743][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.906016][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.913518][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.945916][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.956883][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.964083][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.008475][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.049775][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.068095][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.124950][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.132126][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.148237][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.156019][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.187516][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.232097][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.239358][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.284657][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.316704][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.323937][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.365223][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.372548][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.449652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.456981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.728820][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.785783][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.831756][ T5806] Bluetooth: hci3: command tx timeout [ 82.841131][ T50] Bluetooth: hci0: command tx timeout [ 82.912738][ T50] Bluetooth: hci1: command tx timeout [ 82.918232][ T50] Bluetooth: hci2: command tx timeout [ 83.001264][ T5801] veth0_vlan: entered promiscuous mode [ 83.066588][ T5801] veth1_vlan: entered promiscuous mode [ 83.148399][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.238943][ T5801] veth0_macvtap: entered promiscuous mode [ 83.289888][ T5801] veth1_macvtap: entered promiscuous mode [ 83.336293][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.351113][ T5790] veth0_vlan: entered promiscuous mode [ 83.361606][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.391168][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.411194][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.430293][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.439869][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.449867][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.459099][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.480865][ T5790] veth1_vlan: entered promiscuous mode [ 83.540736][ T5792] veth0_vlan: entered promiscuous mode [ 83.606297][ T5792] veth1_vlan: entered promiscuous mode [ 83.650254][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.668489][ T5790] veth0_macvtap: entered promiscuous mode [ 83.676586][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.705416][ T5790] veth1_macvtap: entered promiscuous mode [ 83.747056][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.747748][ T5792] veth0_macvtap: entered promiscuous mode [ 83.757131][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.766974][ T5789] veth0_vlan: entered promiscuous mode [ 83.799664][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.810728][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.826748][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.838192][ T5792] veth1_macvtap: entered promiscuous mode [ 83.849301][ T5789] veth1_vlan: entered promiscuous mode [ 83.879469][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.891390][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.906881][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.948344][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.973329][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.002503][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.020592][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.035857][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.051540][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.072723][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.081482][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.091186][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.160070][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.181290][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.210341][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.225052][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.240110][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.259902][ T5789] veth0_macvtap: entered promiscuous mode [ 84.310314][ T5789] veth1_macvtap: entered promiscuous mode [ 84.328644][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.338531][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.350243][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.360003][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.376293][ T5888] tipc: Started in network mode [ 84.381373][ T5888] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 84.392564][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 84.467296][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.492663][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.515469][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.540119][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.550391][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.562841][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.574978][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.605716][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.618647][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.635080][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.646017][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.656525][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.667162][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.678908][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.702162][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.713826][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.723714][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.732543][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.792660][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.804662][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.813777][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.864482][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.884486][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.903110][ T5806] Bluetooth: hci3: command tx timeout [ 84.903147][ T50] Bluetooth: hci0: command tx timeout [ 84.939936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.948240][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.983883][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 84.992833][ T50] Bluetooth: hci2: command tx timeout [ 84.993541][ T5806] Bluetooth: hci1: command tx timeout [ 85.013028][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.033387][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.055370][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.066221][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.073182][ T5859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.091636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.093323][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.117962][ T5859] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.139515][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.167151][ T5859] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.176603][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.188984][ T5859] usb 4-1: Manufacturer: syz [ 85.232981][ T5859] usb 4-1: config 0 descriptor?? [ 85.281645][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.298302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.662774][ T5859] rc_core: IR keymap rc-hauppauge not found [ 85.693860][ T5859] Registered IR keymap rc-empty [ 85.706876][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 85.752554][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 85.769832][ T5906] syz.2.11[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.805158][ T5859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 85.864664][ T5910] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.874272][ T5859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 85.929596][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 85.992843][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.002277][ T5906] loop2: detected capacity change from 0 to 4096 [ 86.020219][ T5906] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 86.047520][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.093317][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.154693][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.176516][ T5906] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 86.193179][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.232583][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.293835][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.339732][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.345624][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.396931][ T5859] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 86.416730][ T5906] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 86.475381][ T5859] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 86.508916][ T5859] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 86.578631][ T5859] usb 4-1: USB disconnect, device number 2 [ 86.674300][ T1096] ntfs3: loop2: ino=1e, failed to parse mft record [ 86.945972][ T5929] tun0: tun_chr_ioctl cmd 2147767521 [ 86.983797][ T5806] Bluetooth: hci0: command tx timeout [ 86.984311][ T50] Bluetooth: hci3: command tx timeout [ 87.053334][ T2129] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.062574][ T50] Bluetooth: hci1: command tx timeout [ 87.066215][ T5806] Bluetooth: hci2: command tx timeout [ 87.152946][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 87.156149][ T9] cfg80211: failed to load regulatory.db [ 87.163330][ T5936] netlink: 'syz.3.23': attribute type 7 has an invalid length. [ 87.198143][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 87.213588][ T5934] loop0: detected capacity change from 0 to 1024 [ 87.243944][ T5936] gretap0: entered promiscuous mode [ 87.253374][ T5936] gretap0: left promiscuous mode [ 87.284841][ T2129] usb 2-1: Using ep0 maxpacket: 16 [ 87.297005][ T2129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.307641][ T2129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.319152][ T2129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.331172][ T2129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 87.352418][ T2129] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.377183][ T2129] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 87.388550][ T2129] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 87.394475][ T989] hfsplus: b-tree write err: -5, ino 4 [ 87.398113][ T2129] usb 2-1: Manufacturer: syz [ 87.415065][ T2129] usb 2-1: config 0 descriptor?? [ 87.482523][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.693549][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 87.713290][ T5858] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 87.721456][ T5858] usb 3-1: config 0 has no interface number 0 [ 87.743317][ T5858] usb 3-1: config 0 interface 12 has no altsetting 0 [ 87.753393][ T5858] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 87.765227][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.778822][ T5858] usb 3-1: Product: syz [ 87.785737][ T5858] usb 3-1: Manufacturer: syz [ 87.790476][ T5858] usb 3-1: SerialNumber: syz [ 87.802752][ T2129] rc_core: IR keymap rc-hauppauge not found [ 87.804357][ T5858] usb 3-1: config 0 descriptor?? [ 87.823714][ T2129] Registered IR keymap rc-empty [ 87.828847][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 87.866725][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 87.892685][ T28] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.906620][ T2129] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 87.931106][ T2129] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 87.949201][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 87.984434][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.033844][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.082724][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.092503][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 88.100536][ T28] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 88.110300][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 88.122231][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.136047][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.148661][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 88.161270][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 88.172108][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.185441][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.195879][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.208282][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.242663][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.281276][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.328895][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.393761][ T2129] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.431616][ T2129] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 88.448197][ T2129] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 88.510624][ T2129] usb 2-1: USB disconnect, device number 2 [ 88.517196][ T28] usb 1-1: GET_CAPABILITIES returned 0 [ 88.530675][ T28] usbtmc 1-1:16.0: can't read capabilities [ 88.655627][ T5858] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 88.674958][ T5858] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 88.685272][ T5858] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 88.695031][ T5858] f81534: probe of 3-1:0.12 failed with error -71 [ 88.710841][ T5858] usb 3-1: USB disconnect, device number 2 [ 88.760216][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.777734][ T5944] usbtmc 1-1:16.0: Unable to send data, error -71 [ 88.789872][ T5859] usb 1-1: USB disconnect, device number 2 [ 88.880871][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.065651][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 89.073831][ T28] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 89.082068][ T28] usb 4-1: config 0 has no interface number 0 [ 89.088286][ T28] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 89.098649][ T28] usb 4-1: config 0 interface 196 has no altsetting 0 [ 89.108631][ T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 89.119167][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.127438][ T28] usb 4-1: Product: syz [ 89.131620][ T28] usb 4-1: Manufacturer: syz [ 89.136346][ T28] usb 4-1: SerialNumber: syz [ 89.144399][ T28] usb 4-1: config 0 descriptor?? [ 89.150342][ T5955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.212808][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.275729][ T5959] ======================================================= [ 89.275729][ T5959] WARNING: The mand mount option has been deprecated and [ 89.275729][ T5959] and is ignored by this kernel. Remove the mand [ 89.275729][ T5959] option from the mount to silence this warning. [ 89.275729][ T5959] ======================================================= [ 89.418768][ T5892] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 89.444236][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.476134][ T5892] usb 2-1: config 0 descriptor?? [ 89.494040][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 89.694868][ T5892] gp8psk: usb in 128 operation failed. [ 89.701594][ T5892] gp8psk: usb in 137 operation failed. [ 89.722368][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.754014][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 89.778792][ T28] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 89.787675][ T5892] usb 2-1: media controller created [ 89.837500][ T28] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 89.860567][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.874209][ T28] usb 4-1: USB disconnect, device number 3 [ 89.882672][ T5838] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.921929][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.957854][ T5892] gp8psk_fe: Frontend attached [ 89.963914][ T5892] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 89.978672][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 89.995859][ T28] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 90.099610][ T5892] gp8psk: usb in 138 operation failed. [ 90.114352][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 90.114748][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 90.124405][ T5892] gp8psk: found Genpix USB device pID = 203 (hex) [ 90.147367][ T5838] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.168103][ T5892] usb 2-1: USB disconnect, device number 3 [ 90.176060][ T5838] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.193926][ T5977] capability: warning: `syz.2.43' uses 32-bit capabilities (legacy support in use) [ 90.200661][ T5838] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.244524][ T5838] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.262950][ T1096] wlan1: Trigger new scan to find an IBSS to join [ 90.283164][ T5838] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.302390][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.333705][ T1096] ------------[ cut here ]------------ [ 90.339617][ T1096] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 90.350885][ T1096] WARNING: CPU: 0 PID: 1096 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 90.361357][ T1096] Modules linked in: [ 90.365351][ T1096] CPU: 0 PID: 1096 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 90.373064][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 90.383291][ T1096] Workqueue: events_unbound cfg80211_wiphy_work [ 90.389614][ T1096] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 90.395969][ T1096] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 a2 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 6b 01 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 90.410880][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 90.415741][ T1096] RSP: 0000:ffffc900047af380 EFLAGS: 00010246 [ 90.415791][ T1096] RAX: 60c57c6a58a44600 RBX: 000000000000000c RCX: ffff8880237c0000 [ 90.415809][ T1096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 90.415822][ T1096] RBP: 0000000000000084 R08: ffffc900047aef87 R09: 1ffff920008f5df0 [ 90.415836][ T1096] R10: dffffc0000000000 R11: fffff520008f5df1 R12: 0000000000000020 [ 90.415851][ T1096] R13: dffffc0000000000 R14: ffff8880228c3358 R15: ffff888060612a28 [ 90.415866][ T1096] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 90.415884][ T1096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.488853][ T1096] CR2: 0000001b2ee07ff8 CR3: 000000002e320000 CR4: 00000000003506f0 [ 90.497112][ T1096] Call Trace: [ 90.500444][ T1096] [ 90.503478][ T1096] rate_control_send_low+0x194/0x790 [ 90.508841][ T1096] rate_control_get_rate+0x20b/0x5c0 [ 90.514236][ T1096] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 90.519975][ T1096] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 90.526234][ T1096] ? __lock_acquire+0x1260/0x7c80 [ 90.531584][ T1096] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 90.537875][ T1096] invoke_tx_handlers_late+0xb6/0x1810 [ 90.543449][ T1096] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 90.549325][ T1096] ieee80211_tx+0x2ad/0x420 [ 90.554027][ T1096] ? ieee80211_skb_resize+0x630/0x630 [ 90.559684][ T1096] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 90.565415][ T1096] ? __bpf_trace_tasklet+0x140/0x140 [ 90.570754][ T1096] ? ieee80211_xmit+0x310/0x3f0 [ 90.575708][ T1096] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 90.581742][ T1096] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 90.587677][ T1096] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 90.594089][ T1096] ieee80211_scan_state_send_probe+0x560/0x930 [ 90.600326][ T1096] ieee80211_scan_work+0x4e8/0x1c30 [ 90.605666][ T1096] cfg80211_wiphy_work+0x225/0x260 [ 90.610842][ T1096] ? process_scheduled_works+0x957/0x15b0 [ 90.616661][ T1096] process_scheduled_works+0xa45/0x15b0 [ 90.622766][ T1096] ? assign_work+0x400/0x400 [ 90.627407][ T1096] ? assign_work+0x39e/0x400 [ 90.632004][ T1096] worker_thread+0xa55/0xfc0 [ 90.636710][ T1096] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 90.642778][ T1096] ? _raw_spin_unlock+0x40/0x40 [ 90.647698][ T1096] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 90.653721][ T1096] kthread+0x2fa/0x390 [ 90.657828][ T1096] ? pr_cont_work+0x560/0x560 [ 90.662573][ T1096] ? kthread_blkcg+0xd0/0xd0 [ 90.667388][ T1096] ret_from_fork+0x48/0x80 [ 90.671852][ T1096] ? kthread_blkcg+0xd0/0xd0 [ 90.676544][ T1096] ret_from_fork_asm+0x11/0x20 [ 90.681466][ T1096] [ 90.684577][ T1096] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.691896][ T1096] CPU: 0 PID: 1096 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 90.699499][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 90.709704][ T1096] Workqueue: events_unbound cfg80211_wiphy_work [ 90.716006][ T1096] Call Trace: [ 90.719321][ T1096] [ 90.722371][ T1096] dump_stack_lvl+0x16c/0x230 [ 90.727128][ T1096] ? show_regs_print_info+0x20/0x20 [ 90.732349][ T1096] ? load_image+0x3b0/0x3b0 [ 90.736972][ T1096] panic+0x2c0/0x710 [ 90.740886][ T1096] ? bpf_jit_dump+0xd0/0xd0 [ 90.745440][ T1096] ? ret_from_fork_asm+0x11/0x20 [ 90.750421][ T1096] __warn+0x2e0/0x470 [ 90.754520][ T1096] ? __rate_control_send_low+0x635/0x880 [ 90.760182][ T1096] ? __rate_control_send_low+0x635/0x880 [ 90.765831][ T1096] report_bug+0x2be/0x4f0 [ 90.770176][ T1096] ? __rate_control_send_low+0x635/0x880 [ 90.775835][ T1096] ? __rate_control_send_low+0x635/0x880 [ 90.781485][ T1096] ? __rate_control_send_low+0x637/0x880 [ 90.787221][ T1096] handle_bug+0xcf/0x120 [ 90.791492][ T1096] exc_invalid_op+0x1a/0x50 [ 90.796245][ T1096] asm_exc_invalid_op+0x1a/0x20 [ 90.801116][ T1096] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 90.807731][ T1096] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 a2 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 6b 01 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 90.827350][ T1096] RSP: 0000:ffffc900047af380 EFLAGS: 00010246 [ 90.833432][ T1096] RAX: 60c57c6a58a44600 RBX: 000000000000000c RCX: ffff8880237c0000 [ 90.841408][ T1096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 90.849384][ T1096] RBP: 0000000000000084 R08: ffffc900047aef87 R09: 1ffff920008f5df0 [ 90.857451][ T1096] R10: dffffc0000000000 R11: fffff520008f5df1 R12: 0000000000000020 [ 90.865428][ T1096] R13: dffffc0000000000 R14: ffff8880228c3358 R15: ffff888060612a28 [ 90.873441][ T1096] rate_control_send_low+0x194/0x790 [ 90.878748][ T1096] rate_control_get_rate+0x20b/0x5c0 [ 90.884143][ T1096] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 90.889889][ T1096] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 90.895893][ T1096] ? __lock_acquire+0x1260/0x7c80 [ 90.900961][ T1096] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 90.907131][ T1096] invoke_tx_handlers_late+0xb6/0x1810 [ 90.912612][ T1096] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 90.918430][ T1096] ieee80211_tx+0x2ad/0x420 [ 90.923037][ T1096] ? ieee80211_skb_resize+0x630/0x630 [ 90.928516][ T1096] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 90.934078][ T1096] ? __bpf_trace_tasklet+0x140/0x140 [ 90.939370][ T1096] ? ieee80211_xmit+0x310/0x3f0 [ 90.944325][ T1096] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 90.950404][ T1096] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 90.956227][ T1096] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 90.962654][ T1096] ieee80211_scan_state_send_probe+0x560/0x930 [ 90.968832][ T1096] ieee80211_scan_work+0x4e8/0x1c30 [ 90.974155][ T1096] cfg80211_wiphy_work+0x225/0x260 [ 90.979280][ T1096] ? process_scheduled_works+0x957/0x15b0 [ 90.985007][ T1096] process_scheduled_works+0xa45/0x15b0 [ 90.990623][ T1096] ? assign_work+0x400/0x400 [ 90.995262][ T1096] ? assign_work+0x39e/0x400 [ 90.999969][ T1096] worker_thread+0xa55/0xfc0 [ 91.004598][ T1096] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 91.015201][ T1096] ? _raw_spin_unlock+0x40/0x40 [ 91.020181][ T1096] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 91.026283][ T1096] kthread+0x2fa/0x390 [ 91.030365][ T1096] ? pr_cont_work+0x560/0x560 [ 91.035052][ T1096] ? kthread_blkcg+0xd0/0xd0 [ 91.039648][ T1096] ret_from_fork+0x48/0x80 [ 91.044074][ T1096] ? kthread_blkcg+0xd0/0xd0 [ 91.048671][ T1096] ret_from_fork_asm+0x11/0x20 [ 91.053484][ T1096] [ 91.056875][ T1096] Kernel Offset: disabled [ 91.061467][ T1096] Rebooting in 86400 seconds..