last executing test programs: 8.485720495s ago: executing program 2 (id=84): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff00"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="6865a1d4", 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00', 0x3) 8.321345139s ago: executing program 0 (id=86): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) 7.275149786s ago: executing program 0 (id=88): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf25140000000800010000000000"], 0x1c}}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) close(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(r3) execveat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', &(0x7f0000000400)={[&(0x7f0000000140)='nl802154\x00', &(0x7f0000000180)='].:\\\x00', &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x0f\\&&\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)=')\\,@#\x00', &(0x7f0000000380)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000440)=':{\x00']}, 0x400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='0\x00', 0x2) 6.019696868s ago: executing program 3 (id=91): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 5.968778409s ago: executing program 2 (id=92): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001980)={[{@nodiscard}, {@memory_low}, {@noheap}, {@alloc_mode_reuse}, {@age_extent_cache}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@two_active_logs}, {@noinline_dentry}]}, 0x1, 0x5509, &(0x7f0000002480)="$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") 5.864754132s ago: executing program 0 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 5.680177666s ago: executing program 1 (id=95): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) syz_open_procfs(0x0, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 5.352230925s ago: executing program 1 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008881}, 0x20008004) 4.964726604s ago: executing program 1 (id=97): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) 4.770664089s ago: executing program 0 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff00"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(0xffffffffffffffff) execveat(r0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000400)={[&(0x7f0000000140)='nl802154\x00', &(0x7f0000000180)='].:\\\x00', &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x0f\\&&\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)=')\\,@#\x00', &(0x7f0000000380)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000440)=':{\x00']}, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 3.785842514s ago: executing program 1 (id=99): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x402) 3.633013418s ago: executing program 1 (id=100): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff00"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="6865a1d4", 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00', 0x3) 3.253780067s ago: executing program 2 (id=101): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) sendmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) 3.207293579s ago: executing program 3 (id=102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf25140000000800010000000000"], 0x1c}}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) close(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(r3) execveat(0xffffffffffffffff, &(0x7f0000000080)='./sys\x00', &(0x7f0000000400)={[&(0x7f0000000140)='nl802154\x00', &(0x7f0000000180)='].:\\\x00', &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x0f\\&&\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)=')\\,@#\x00', &(0x7f0000000380)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000440)=':{\x00']}, 0x400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='0\x00', 0x2) 2.392669569s ago: executing program 3 (id=103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.36138559s ago: executing program 2 (id=104): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) syz_open_procfs(0x0, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 2.336001171s ago: executing program 3 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008881}, 0x20008004) 2.217368104s ago: executing program 2 (id=106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) 2.147123706s ago: executing program 3 (id=107): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) 746.298931ms ago: executing program 0 (id=108): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x402) 745.543391ms ago: executing program 2 (id=116): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) 736.723651ms ago: executing program 3 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff00"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(0xffffffffffffffff) execveat(r0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000400)={[&(0x7f0000000140)='nl802154\x00', &(0x7f0000000180)='].:\\\x00', &(0x7f00000001c0)='nl802154\x00', &(0x7f0000000200)='sysfs\x00', &(0x7f0000000240)='\x0f\\&&\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)=')\\,@#\x00', &(0x7f0000000380)='sysfs\x00']}, &(0x7f0000000480)={[&(0x7f0000000440)=':{\x00']}, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 574.303465ms ago: executing program 0 (id=109): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300640101010800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x6677) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r7, 0x0, 0x0, 0x2c2, 0xca) close(0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c0000130003", 0x7}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000019300)=ANY=[], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) 0s ago: executing program 1 (id=110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 88.034009][ T5761] cgroup: Unknown subsys name 'net' [ 88.201693][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.918594][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.102898][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.123080][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.131615][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.139925][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.150237][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.158548][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.167039][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.175381][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.194477][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.194580][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.209837][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.217525][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.226213][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.235035][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.245861][ T788] cfg80211: failed to load regulatory.db [ 92.256948][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.265869][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.274115][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.282885][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.295752][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.304521][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.312481][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.320260][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.328838][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.336323][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.836977][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 92.871977][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 92.942176][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 93.067407][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 93.120746][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.128931][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.136489][ T5777] bridge_slave_0: entered allmulticast mode [ 93.144121][ T5777] bridge_slave_0: entered promiscuous mode [ 93.184853][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.192097][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.199513][ T5777] bridge_slave_1: entered allmulticast mode [ 93.207456][ T5777] bridge_slave_1: entered promiscuous mode [ 93.215551][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.224515][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.231694][ T5778] bridge_slave_0: entered allmulticast mode [ 93.239713][ T5778] bridge_slave_0: entered promiscuous mode [ 93.259912][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.267281][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.274731][ T5778] bridge_slave_1: entered allmulticast mode [ 93.281798][ T5778] bridge_slave_1: entered promiscuous mode [ 93.328498][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.335899][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.346091][ T5783] bridge_slave_0: entered allmulticast mode [ 93.353343][ T5783] bridge_slave_0: entered promiscuous mode [ 93.391774][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.400037][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.407543][ T5783] bridge_slave_1: entered allmulticast mode [ 93.415089][ T5783] bridge_slave_1: entered promiscuous mode [ 93.424682][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.439789][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.466968][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.523739][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.546601][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.560172][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.569599][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.577395][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.584986][ T5779] bridge_slave_0: entered allmulticast mode [ 93.592171][ T5779] bridge_slave_0: entered promiscuous mode [ 93.633279][ T5777] team0: Port device team_slave_0 added [ 93.643414][ T5778] team0: Port device team_slave_0 added [ 93.672164][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.679478][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.687195][ T5779] bridge_slave_1: entered allmulticast mode [ 93.694798][ T5779] bridge_slave_1: entered promiscuous mode [ 93.705815][ T5778] team0: Port device team_slave_1 added [ 93.713705][ T5777] team0: Port device team_slave_1 added [ 93.734731][ T5783] team0: Port device team_slave_0 added [ 93.787271][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.794396][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.820850][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.835063][ T5783] team0: Port device team_slave_1 added [ 93.841666][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.849035][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.875196][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.909022][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.916129][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.942492][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.988462][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.001588][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.014600][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.021681][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.051512][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.065917][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.073007][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.099444][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.112764][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.119781][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.145975][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.231584][ T5779] team0: Port device team_slave_0 added [ 94.277762][ T5777] hsr_slave_0: entered promiscuous mode [ 94.285036][ T5777] hsr_slave_1: entered promiscuous mode [ 94.293944][ T5779] team0: Port device team_slave_1 added [ 94.308907][ T5778] hsr_slave_0: entered promiscuous mode [ 94.315277][ T5791] Bluetooth: hci3: command tx timeout [ 94.321327][ T5778] hsr_slave_1: entered promiscuous mode [ 94.323692][ T5791] Bluetooth: hci2: command tx timeout [ 94.332952][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.340855][ T5778] Cannot create hsr debugfs directory [ 94.354109][ T5783] hsr_slave_0: entered promiscuous mode [ 94.360721][ T5783] hsr_slave_1: entered promiscuous mode [ 94.367267][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.375493][ T5783] Cannot create hsr debugfs directory [ 94.398128][ T5791] Bluetooth: hci1: command tx timeout [ 94.404195][ T5782] Bluetooth: hci0: command tx timeout [ 94.482176][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.489405][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.518720][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.578855][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.586040][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.615413][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.818903][ T5779] hsr_slave_0: entered promiscuous mode [ 94.826300][ T5779] hsr_slave_1: entered promiscuous mode [ 94.832980][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.840918][ T5779] Cannot create hsr debugfs directory [ 95.057383][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.072200][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.092732][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.103191][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.159239][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.175023][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.188588][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.200366][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.301081][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.311534][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.346368][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.379587][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.419513][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.437239][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.463365][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.475018][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.563849][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.615804][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.650314][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.682122][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.707498][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.714850][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.728908][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.736076][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.770488][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.777734][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.816127][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.823328][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.871223][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.885923][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.928510][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.962330][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.969507][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.986928][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.007916][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.015124][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.025268][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.032475][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.060869][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.068116][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.172090][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.184916][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.393730][ T5791] Bluetooth: hci2: command tx timeout [ 96.399218][ T5791] Bluetooth: hci3: command tx timeout [ 96.474433][ T5791] Bluetooth: hci1: command tx timeout [ 96.479923][ T5791] Bluetooth: hci0: command tx timeout [ 96.700270][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.722791][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.738390][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.786942][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.906609][ T5779] veth0_vlan: entered promiscuous mode [ 96.916048][ T5783] veth0_vlan: entered promiscuous mode [ 96.937481][ T5779] veth1_vlan: entered promiscuous mode [ 96.944828][ T5777] veth0_vlan: entered promiscuous mode [ 96.970146][ T5778] veth0_vlan: entered promiscuous mode [ 96.994267][ T5778] veth1_vlan: entered promiscuous mode [ 97.004917][ T5777] veth1_vlan: entered promiscuous mode [ 97.021496][ T5783] veth1_vlan: entered promiscuous mode [ 97.110159][ T5778] veth0_macvtap: entered promiscuous mode [ 97.121534][ T5778] veth1_macvtap: entered promiscuous mode [ 97.129794][ T5777] veth0_macvtap: entered promiscuous mode [ 97.145864][ T5783] veth0_macvtap: entered promiscuous mode [ 97.160065][ T5783] veth1_macvtap: entered promiscuous mode [ 97.167729][ T5777] veth1_macvtap: entered promiscuous mode [ 97.188428][ T5779] veth0_macvtap: entered promiscuous mode [ 97.200557][ T5779] veth1_macvtap: entered promiscuous mode [ 97.233817][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.248035][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.277226][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.288302][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.300976][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.313145][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.322079][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.335539][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.344479][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.381286][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.395880][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.406696][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.417368][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.428822][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.438005][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.449092][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.461610][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.477789][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.488765][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.499059][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.509936][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.520645][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.531366][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.543147][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.560799][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.570498][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.579976][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.589296][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.613302][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.625779][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.638322][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.650004][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.662229][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.670494][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.688467][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.698649][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.709485][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.719721][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.730707][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.742831][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.754242][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.763308][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.772062][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781772][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.818670][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.830586][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.841038][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850208][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.998678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.013598][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.101782][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.117335][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.135615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.155731][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.204072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.211972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295270][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.324124][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.358069][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.366151][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.472480][ T5782] Bluetooth: hci2: command tx timeout [ 98.478748][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.482975][ T5791] Bluetooth: hci3: command tx timeout [ 98.511489][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.552993][ T5782] Bluetooth: hci1: command tx timeout [ 98.558551][ T5791] Bluetooth: hci0: command tx timeout [ 98.768391][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.989663][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.541648][ T5856] syz.1.6[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.742718][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.979522][ T8] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 100.004692][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.065457][ T8] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 100.130732][ T8] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 100.156128][ T8] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 100.312193][ T5856] loop1: detected capacity change from 0 to 32768 [ 100.345579][ T5856] ======================================================= [ 100.345579][ T5856] WARNING: The mand mount option has been deprecated and [ 100.345579][ T5856] and is ignored by this kernel. Remove the mand [ 100.345579][ T5856] option from the mount to silence this warning. [ 100.345579][ T5856] ======================================================= [ 100.449301][ T5864] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 100.534908][ T8] usb 3-1: emi26_load_firmware - request_firmware() failed [ 100.553747][ T5791] Bluetooth: hci3: command tx timeout [ 100.559278][ T5782] Bluetooth: hci2: command tx timeout [ 100.605662][ T8] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 100.633124][ T5782] Bluetooth: hci1: command tx timeout [ 100.638641][ T5791] Bluetooth: hci0: command tx timeout [ 100.702359][ T1671] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.704463][ T8] emi26 - firmware loader: probe of 3-1:1.0 failed with error -5 [ 100.894906][ T1671] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 100.904446][ T1671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.910436][ T5856] JBD2: Ignoring recovery information on journal [ 100.977908][ T5856] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.989144][ T1671] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 101.010337][ T5824] usb 3-1: USB disconnect, device number 2 [ 101.046158][ T1671] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 101.083050][ T1671] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 101.098916][ T27] audit: type=1800 audit(1785620019.145:2): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 101.185784][ T5863] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 101.216036][ T1671] usb 4-1: emi26_load_firmware - request_firmware() failed [ 101.240504][ T1671] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 101.268609][ T1671] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 101.316235][ T1671] usb 4-1: USB disconnect, device number 2 [ 101.385326][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 101.469285][ T5873] process 'syz.0.8' launched './file1' with NULL argv: empty string added [ 102.679614][ T5824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.911485][ T5824] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 102.946955][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.061662][ T5824] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 103.076953][ T5824] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 103.087798][ T5824] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 105.046947][ T5891] loop2: detected capacity change from 0 to 40427 [ 105.081941][ T5891] F2FS-fs (loop2): heap/no_heap options were deprecated [ 105.106915][ T5891] F2FS-fs (loop2): invalid crc value [ 105.124563][ T5891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.148013][ T5894] loop1: detected capacity change from 0 to 32768 [ 105.207381][ T5894] JBD2: Ignoring recovery information on journal [ 105.384422][ T5891] F2FS-fs (loop2): Start checkpoint disabled! [ 105.458792][ T5891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.471138][ T5894] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.522332][ T27] audit: type=1800 audit(1785620023.565:3): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 105.652414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 105.712525][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 107.275549][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.577333][ T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 107.658767][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.844070][ T9] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 108.018280][ T5914] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 108.040193][ T5824] usb 4-1: emi26_load_firmware - request_firmware() failed [ 108.047890][ T9] usb 2-1: emi26_load_firmware - request_firmware() failed [ 108.064208][ T5824] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 108.072403][ T9] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 108.072462][ T9] emi26 - firmware loader: probe of 2-1:1.0 failed with error -5 [ 108.102759][ T9] usb 2-1: USB disconnect, device number 2 [ 108.117749][ T5824] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 108.166096][ T5824] usb 4-1: USB disconnect, device number 3 [ 108.562556][ T5824] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.757996][ T5824] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 108.767553][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.782529][ T5824] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 108.790110][ T5824] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 108.819212][ T5824] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 110.081218][ T5933] loop1: detected capacity change from 0 to 40427 [ 110.144934][ T5933] F2FS-fs (loop1): heap/no_heap options were deprecated [ 110.204688][ T5933] F2FS-fs (loop1): invalid crc value [ 110.248698][ T5933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.345319][ T5933] F2FS-fs (loop1): Start checkpoint disabled! [ 110.399085][ T5933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 110.852479][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.576997][ T8] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 111.592896][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.623474][ T8] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 111.886723][ T5950] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 111.922508][ T8] usb 1-1: emi26_load_firmware - request_firmware() failed [ 111.925790][ T5824] usb 4-1: emi26_load_firmware - request_firmware() failed [ 111.934817][ T8] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 111.975947][ T5824] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 112.001594][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.009528][ T8] emi26 - firmware loader: probe of 1-1:1.0 failed with error -5 [ 112.035950][ T5824] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 112.043166][ T8] usb 1-1: USB disconnect, device number 2 [ 112.101518][ T5824] usb 4-1: USB disconnect, device number 4 [ 112.234880][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 112.250023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.263921][ T9] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 112.281568][ T9] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 112.323261][ T9] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 112.468882][ T5955] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 112.483694][ T9] usb 3-1: emi26_load_firmware - request_firmware() failed [ 112.490968][ T9] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 112.502826][ T9] emi26 - firmware loader: probe of 3-1:1.0 failed with error -5 [ 112.515372][ T9] usb 3-1: USB disconnect, device number 3 [ 112.529525][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.724137][ T5763] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 112.733519][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.753116][ T5763] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 112.760551][ T5763] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 112.770213][ T5763] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 114.361373][ T1671] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.576332][ T1671] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 114.585748][ T1671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.601150][ T1671] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 114.820307][ T5978] loop1: detected capacity change from 0 to 128 [ 114.829253][ T5968] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 114.849019][ T1671] usb 1-1: emi26_load_firmware - request_firmware() failed [ 114.857817][ T5763] usb 2-1: emi26_load_firmware - request_firmware() failed [ 114.868125][ T1671] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 114.888269][ T1671] emi26 - firmware loader: probe of 1-1:1.0 failed with error -5 [ 114.899981][ T1671] usb 1-1: USB disconnect, device number 3 [ 114.936948][ T5763] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 114.979569][ T5978] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.003374][ T5763] emi26 - firmware loader: probe of 2-1:1.0 failed with error -5 [ 115.047366][ T5763] usb 2-1: USB disconnect, device number 3 [ 115.059606][ T5978] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.091162][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.298425][ T5978] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.45: No space for directory leaf checksum. Please run e2fsck -D. [ 115.321183][ T5978] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.45: checksumming directory block 0 [ 115.350687][ T5978] CacheFiles: Lookup cache failed with error -74 [ 115.358246][ T5978] CacheFiles: Failed to register: -74 [ 115.808836][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.051061][ T28] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.247030][ T28] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 117.256395][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.290456][ T28] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 117.319979][ T28] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 117.347485][ T28] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 117.591674][ T5976] loop3: detected capacity change from 0 to 40427 [ 117.611321][ T5976] F2FS-fs (loop3): heap/no_heap options were deprecated [ 117.641086][ T5976] F2FS-fs (loop3): invalid crc value [ 117.656782][ T5976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.750936][ T5976] F2FS-fs (loop3): Start checkpoint disabled! [ 117.802318][ T1671] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.040161][ T1671] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 118.060439][ T1671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.129139][ T1671] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 118.837319][ T6010] loop0: detected capacity change from 0 to 128 [ 118.993882][ T6010] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.194519][ T6010] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.589624][ T6010] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.642547][ T6010] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.58: checksumming directory block 0 [ 119.721206][ T6010] CacheFiles: Lookup cache failed with error -74 [ 119.753428][ T6010] CacheFiles: Failed to register: -74 [ 119.872079][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.886364][ T6019] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 119.913511][ T28] usb 2-1: emi26_load_firmware - request_firmware() failed [ 119.920812][ T28] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 119.936412][ T1671] usb 3-1: emi26_load_firmware - request_firmware() failed [ 119.956505][ T1671] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 119.975007][ T28] emi26 - firmware loader: probe of 2-1:1.0 failed with error -5 [ 119.993896][ T1671] emi26 - firmware loader: probe of 3-1:1.0 failed with error -5 [ 120.017044][ T28] usb 2-1: USB disconnect, device number 4 [ 120.035379][ T1671] usb 3-1: USB disconnect, device number 4 [ 121.252332][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.446755][ T28] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 121.489426][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.562523][ T28] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 121.583377][ T28] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 121.599009][ T28] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 122.712711][ T5824] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.782635][ T6048] loop2: detected capacity change from 0 to 128 [ 122.969975][ T5824] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 123.004602][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.037761][ T5824] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 123.084230][ T6048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.096870][ T6048] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.187837][ T6048] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.71: No space for directory leaf checksum. Please run e2fsck -D. [ 123.233039][ T6048] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.71: checksumming directory block 0 [ 123.279043][ T6048] CacheFiles: Lookup cache failed with error -74 [ 123.302539][ T6048] CacheFiles: Failed to register: -74 [ 123.411810][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.715858][ T6039] loop0: detected capacity change from 0 to 40427 [ 124.727939][ T6039] F2FS-fs (loop0): heap/no_heap options were deprecated [ 124.762041][ T6039] F2FS-fs (loop0): invalid crc value [ 124.808996][ T6039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.926758][ T6039] F2FS-fs (loop0): Start checkpoint disabled! [ 124.950153][ T6039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 127.119242][ T6095] CacheFiles: Failed to register: -95 [ 127.387345][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.350939][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 128.427027][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.722934][ T9] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 128.826668][ T6099] kernel profiling enabled (shift: 9) [ 129.988401][ T6120] CacheFiles: Failed to register: -95 [ 131.842856][ T6111] loop2: detected capacity change from 0 to 40427 [ 131.896623][ T6111] F2FS-fs (loop2): heap/no_heap options were deprecated [ 131.948926][ T6111] F2FS-fs (loop2): invalid crc value [ 131.960506][ T6111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.063196][ T6111] F2FS-fs (loop2): Start checkpoint disabled! [ 132.083659][ T6111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 133.190693][ T6144] Zero length message leads to an empty skb [ 133.202165][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.209206][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.226209][ T6146] CacheFiles: Failed to register: -95 [ 135.052559][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.447351][ C1] ------------[ cut here ]------------ [ 135.453278][ C1] WARNING: CPU: 1 PID: 6156 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 135.463387][ C1] Modules linked in: [ 135.467339][ C1] CPU: 1 PID: 6156 Comm: syz.2.116 Not tainted syzkaller #0 [ 135.474706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.484864][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 135.491261][ C1] Code: f7 4c 89 ef e8 90 69 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 eb 82 7c f7 0f 0b e9 61 f8 ff ff e8 df 82 7c f7 <0f> 0b e9 85 fb ff ff e8 d3 82 7c f7 48 c7 c7 40 bf 65 8e 4c 89 e6 [ 135.510950][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 135.517101][ C1] RAX: ffffffff8a0aec41 RBX: dffffc0000000000 RCX: ffff88802b321e00 [ 135.525150][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.533202][ C1] RBP: 0000000000000000 R08: ffff88802b321e00 R09: 0000000000000003 [ 135.541217][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c72a440 [ 135.549271][ C1] R13: ffff88805b845424 R14: ffff88805c72a930 R15: ffff88805b845400 [ 135.557318][ C1] FS: 00007f498d3f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 135.566321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.572976][ C1] CR2: 00005555659c9a78 CR3: 0000000077a2b000 CR4: 00000000003506e0 [ 135.580992][ C1] Call Trace: [ 135.584346][ C1] [ 135.587235][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 135.592873][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 135.598389][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 135.605247][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 135.610848][ C1] __iterate_interfaces+0x225/0x4c0 [ 135.616121][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.622452][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 135.629719][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 135.636071][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 135.643203][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 135.648453][ C1] ? hw_scan_work+0xf10/0xf10 [ 135.653231][ C1] __hrtimer_run_queues+0x525/0xc10 [ 135.658504][ C1] ? hrtimer_interrupt+0x980/0x980 [ 135.663691][ C1] ? read_tsc+0x9/0x20 [ 135.667818][ C1] hrtimer_run_softirq+0x177/0x290 [ 135.673041][ C1] handle_softirqs+0x27d/0x820 [ 135.677883][ C1] ? read_tsc+0x9/0x20 [ 135.681994][ C1] ? ktime_get+0x24b/0x280 [ 135.686490][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 135.691302][ C1] ? do_softirq+0x1a0/0x1a0 [ 135.695883][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 135.701130][ C1] __irq_exit_rcu+0xd3/0x190 [ 135.705800][ C1] ? irq_exit_rcu+0x20/0x20 [ 135.710361][ C1] irq_exit_rcu+0x9/0x20 [ 135.714684][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 135.720379][ C1] [ 135.723379][ C1] [ 135.726348][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.732406][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 135.738264][ C1] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 b0 38 09 e8 7e 13 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 135.757954][ C1] RSP: 0018:ffffc9000b5ef2a0 EFLAGS: 00000286 [ 135.764102][ C1] RAX: a9fcd592ae29d800 RBX: 0000000000000000 RCX: a9fcd592ae29d800 [ 135.772143][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 135.780225][ C1] RBP: ffffc9000b5ef2f0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 135.788282][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802b321e00 [ 135.796444][ C1] R13: ffff8880b8f3cfc8 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 135.804524][ C1] __schedule+0x15b6/0x4660 [ 135.809108][ C1] ? asan.module_dtor+0x20/0x20 [ 135.814050][ C1] ? mark_lock+0x94/0x320 [ 135.818452][ C1] schedule+0xbd/0x170 [ 135.822597][ C1] schedule_timeout+0xc1/0x2d0 [ 135.827412][ C1] ? console_conditional_schedule+0x40/0x40 [ 135.833389][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 135.838466][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.844713][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 135.849977][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 135.855080][ C1] ? unix_find_other+0x8e0/0x8e0 [ 135.860062][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 135.865168][ C1] ? wake_bit_function+0x200/0x200 [ 135.870326][ C1] ? __rwlock_init+0x150/0x150 [ 135.875172][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 135.880683][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 135.885972][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 135.891159][ C1] ? unix_dgram_poll+0x680/0x680 [ 135.896172][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 135.902677][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 135.908273][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.913634][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 135.919138][ C1] ? unix_dgram_poll+0x680/0x680 [ 135.924163][ C1] ____sys_sendmsg+0x61b/0x980 [ 135.929022][ C1] ? __asan_memset+0x22/0x40 [ 135.933699][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 135.938779][ C1] ? __import_iovec+0x3fa/0x850 [ 135.943716][ C1] ? import_iovec+0x73/0xa0 [ 135.948282][ C1] ___sys_sendmsg+0x2a6/0x360 [ 135.953042][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 135.957899][ C1] ? __might_fault+0xc6/0x120 [ 135.962659][ C1] ? __might_fault+0xaa/0x120 [ 135.967387][ C1] __sys_sendmmsg+0x2ca/0x510 [ 135.972142][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 135.977259][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 135.983279][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 135.989318][ C1] ? lock_chain_count+0x20/0x20 [ 135.994289][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 135.999195][ C1] do_syscall_64+0x55/0xb0 [ 136.003705][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.008438][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.013210][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.019158][ C1] RIP: 0033:0x7f498f19e019 [ 136.023687][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.043579][ C1] RSP: 002b:00007f498d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.052210][ C1] RAX: ffffffffffffffda RBX: 00007f498f425fa0 RCX: 00007f498f19e019 [ 136.060330][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 136.068354][ C1] RBP: 00007f498f23500c R08: 0000000000000000 R09: 0000000000000000 [ 136.076369][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.084378][ C1] R13: 00007f498f426038 R14: 00007f498f425fa0 R15: 00007ffeadfe5ca8 [ 136.092426][ C1] [ 136.095480][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.102762][ C1] CPU: 1 PID: 6156 Comm: syz.2.116 Not tainted syzkaller #0 [ 136.110050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.120114][ C1] Call Trace: [ 136.123403][ C1] [ 136.126271][ C1] dump_stack_lvl+0x18c/0x250 [ 136.130962][ C1] ? show_regs_print_info+0x20/0x20 [ 136.136170][ C1] ? load_image+0x420/0x420 [ 136.140695][ C1] panic+0x2ca/0x720 [ 136.144611][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 136.149144][ C1] __warn+0x2e0/0x470 [ 136.153161][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.158936][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.164681][ C1] report_bug+0x2be/0x4f0 [ 136.169043][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.174777][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.180570][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 136.186307][ C1] handle_bug+0xcf/0x120 [ 136.190651][ C1] exc_invalid_op+0x1a/0x50 [ 136.195181][ C1] asm_exc_invalid_op+0x1a/0x20 [ 136.200042][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 136.206382][ C1] Code: f7 4c 89 ef e8 90 69 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 eb 82 7c f7 0f 0b e9 61 f8 ff ff e8 df 82 7c f7 <0f> 0b e9 85 fb ff ff e8 d3 82 7c f7 48 c7 c7 40 bf 65 8e 4c 89 e6 [ 136.226001][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 136.232108][ C1] RAX: ffffffff8a0aec41 RBX: dffffc0000000000 RCX: ffff88802b321e00 [ 136.240092][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.248070][ C1] RBP: 0000000000000000 R08: ffff88802b321e00 R09: 0000000000000003 [ 136.256051][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c72a440 [ 136.264034][ C1] R13: ffff88805b845424 R14: ffff88805c72a930 R15: ffff88805b845400 [ 136.272022][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.277763][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 136.283524][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 136.289103][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 136.294600][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 136.301381][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 136.306943][ C1] __iterate_interfaces+0x225/0x4c0 [ 136.312151][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 136.318402][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 136.325608][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 136.331873][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 136.338907][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 136.344116][ C1] ? hw_scan_work+0xf10/0xf10 [ 136.348811][ C1] __hrtimer_run_queues+0x525/0xc10 [ 136.354045][ C1] ? hrtimer_interrupt+0x980/0x980 [ 136.359178][ C1] ? read_tsc+0x9/0x20 [ 136.363283][ C1] hrtimer_run_softirq+0x177/0x290 [ 136.368417][ C1] handle_softirqs+0x27d/0x820 [ 136.373206][ C1] ? read_tsc+0x9/0x20 [ 136.377301][ C1] ? ktime_get+0x24b/0x280 [ 136.381751][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 136.386538][ C1] ? do_softirq+0x1a0/0x1a0 [ 136.391054][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 136.396272][ C1] __irq_exit_rcu+0xd3/0x190 [ 136.400872][ C1] ? irq_exit_rcu+0x20/0x20 [ 136.405388][ C1] irq_exit_rcu+0x9/0x20 [ 136.409663][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 136.415307][ C1] [ 136.418263][ C1] [ 136.421200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.427184][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 136.432995][ C1] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 b0 38 09 e8 7e 13 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 136.452610][ C1] RSP: 0018:ffffc9000b5ef2a0 EFLAGS: 00000286 [ 136.458910][ C1] RAX: a9fcd592ae29d800 RBX: 0000000000000000 RCX: a9fcd592ae29d800 [ 136.466909][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 136.474897][ C1] RBP: ffffc9000b5ef2f0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 136.482879][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: ffff88802b321e00 [ 136.490944][ C1] R13: ffff8880b8f3cfc8 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 136.499050][ C1] __schedule+0x15b6/0x4660 [ 136.503592][ C1] ? asan.module_dtor+0x20/0x20 [ 136.508454][ C1] ? mark_lock+0x94/0x320 [ 136.512820][ C1] schedule+0xbd/0x170 [ 136.516902][ C1] schedule_timeout+0xc1/0x2d0 [ 136.521679][ C1] ? console_conditional_schedule+0x40/0x40 [ 136.527599][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 136.532633][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.538819][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 136.544030][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 136.549063][ C1] ? unix_find_other+0x8e0/0x8e0 [ 136.554007][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 136.559046][ C1] ? wake_bit_function+0x200/0x200 [ 136.564168][ C1] ? __rwlock_init+0x150/0x150 [ 136.568956][ C1] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 136.574437][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 136.579672][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 136.584832][ C1] ? unix_dgram_poll+0x680/0x680 [ 136.589784][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 136.596243][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 136.601803][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.607101][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 136.612581][ C1] ? unix_dgram_poll+0x680/0x680 [ 136.617526][ C1] ____sys_sendmsg+0x61b/0x980 [ 136.622336][ C1] ? __asan_memset+0x22/0x40 [ 136.626975][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 136.632010][ C1] ? __import_iovec+0x3fa/0x850 [ 136.636879][ C1] ? import_iovec+0x73/0xa0 [ 136.641399][ C1] ___sys_sendmsg+0x2a6/0x360 [ 136.646086][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 136.650887][ C1] ? __might_fault+0xc6/0x120 [ 136.655582][ C1] ? __might_fault+0xaa/0x120 [ 136.660359][ C1] __sys_sendmmsg+0x2ca/0x510 [ 136.665060][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 136.670095][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 136.676021][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 136.682047][ C1] ? lock_chain_count+0x20/0x20 [ 136.686914][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 136.691773][ C1] do_syscall_64+0x55/0xb0 [ 136.696194][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.700873][ C1] ? clear_bhb_loop+0x40/0x90 [ 136.705558][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.711456][ C1] RIP: 0033:0x7f498f19e019 [ 136.715888][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.735502][ C1] RSP: 002b:00007f498d3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.743923][ C1] RAX: ffffffffffffffda RBX: 00007f498f425fa0 RCX: 00007f498f19e019 [ 136.751901][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000005 [ 136.759876][ C1] RBP: 00007f498f23500c R08: 0000000000000000 R09: 0000000000000000 [ 136.767848][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.775823][ C1] R13: 00007f498f426038 R14: 00007f498f425fa0 R15: 00007ffeadfe5ca8 [ 136.783899][ C1] [ 136.787500][ C1] Kernel Offset: disabled [ 136.791866][ C1] Rebooting in 86400 seconds..