last executing test programs: 14.895288566s ago: executing program 0 (id=14): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0xbcdb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14.569929925s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x0, 0xe12, 0x1, 0x0, 0x8}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002f40)=[{}, {}, {}, {}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioprio_set$pid(0x2, 0x0, 0x4004) dup3(r3, r4, 0x80000) 14.304281419s ago: executing program 0 (id=19): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xb) 13.337508154s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 12.108480252s ago: executing program 1 (id=22): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xb) 10.833918324s ago: executing program 2 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x40050) 10.397533163s ago: executing program 2 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0xff, 0x8}) 9.731346522s ago: executing program 0 (id=27): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) r6 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="01008000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname(r6, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x80) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) 9.397376081s ago: executing program 2 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x0, 0xe12, 0x1, 0x0, 0x8}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002f40)=[{}, {}, {}, {}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioprio_set$pid(0x2, 0x0, 0x4004) dup3(r3, r4, 0x80000) 9.198977969s ago: executing program 3 (id=29): close(0x4) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) 5.571919339s ago: executing program 0 (id=30): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) keyctl$setperm(0x5, 0x0, 0x100) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000001280)=0x10001) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xd, {0xfffffff7, 0x1, 0xe, 0xfffffff8}, {0x5, 0x0, 0x4, 0xd50f}, {0x2c00, 0x3}}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@newsa={0x13c, 0x10, 0x713, 0x800, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@mcast1, 0x4, 0x0, 0x4e23, 0x80, 0x0, 0x0, 0x20, 0x1d}, {@in=@remote, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x4, 0x800, 0x8000000000000000}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x4000084) 5.571458589s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 5.490050046s ago: executing program 3 (id=32): unshare(0x2040400) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) unshare(0x2a020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shutdown(r0, 0x1) 5.242853178s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4800) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 5.078312323s ago: executing program 1 (id=34): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.901952798s ago: executing program 3 (id=35): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xb) 4.799787717s ago: executing program 1 (id=36): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 4.097448329s ago: executing program 1 (id=37): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0xbcdb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.759991639s ago: executing program 1 (id=38): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r0, 0x0, 0x500) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d7", 0xd) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 2.675250574s ago: executing program 2 (id=39): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) r6 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="01008000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname(r6, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x80) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) 1.898712103s ago: executing program 0 (id=40): close(0x4) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) 124.43239ms ago: executing program 2 (id=41): unshare(0x2040400) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) unshare(0x2a020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shutdown(r0, 0x1) 26.235898ms ago: executing program 1 (id=42): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xb) 0s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4800) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. [ 78.602671][ T5758] cgroup: Unknown subsys name 'net' [ 78.716335][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.430641][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.366984][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.375568][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.384886][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.417531][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.436280][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.445120][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.453017][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.467193][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.475240][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.483901][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.501724][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.510534][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.518893][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.527165][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.535288][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.542706][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.553853][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.571423][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.572676][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.587455][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.595135][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.603442][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.611510][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.619079][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.093890][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.146160][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.272256][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.371431][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 83.393878][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.401440][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.409405][ T5774] bridge_slave_0: entered allmulticast mode [ 83.416769][ T5774] bridge_slave_0: entered promiscuous mode [ 83.426372][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.433639][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.441215][ T5774] bridge_slave_1: entered allmulticast mode [ 83.448522][ T5774] bridge_slave_1: entered promiscuous mode [ 83.468486][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.475909][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.483156][ T5775] bridge_slave_0: entered allmulticast mode [ 83.493156][ T5775] bridge_slave_0: entered promiscuous mode [ 83.502011][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.509418][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.516716][ T5775] bridge_slave_1: entered allmulticast mode [ 83.523969][ T5775] bridge_slave_1: entered promiscuous mode [ 83.617344][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.629092][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.645736][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.672755][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.723075][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.730401][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.738108][ T5776] bridge_slave_0: entered allmulticast mode [ 83.745942][ T5776] bridge_slave_0: entered promiscuous mode [ 83.782931][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.790839][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.798244][ T5776] bridge_slave_1: entered allmulticast mode [ 83.805954][ T5776] bridge_slave_1: entered promiscuous mode [ 83.818374][ T5774] team0: Port device team_slave_0 added [ 83.838805][ T5775] team0: Port device team_slave_0 added [ 83.849161][ T5775] team0: Port device team_slave_1 added [ 83.877999][ T5774] team0: Port device team_slave_1 added [ 83.884110][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.892014][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.899338][ T5770] bridge_slave_0: entered allmulticast mode [ 83.906443][ T5770] bridge_slave_0: entered promiscuous mode [ 83.927228][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.960359][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.968017][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.975900][ T5770] bridge_slave_1: entered allmulticast mode [ 83.983368][ T5770] bridge_slave_1: entered promiscuous mode [ 84.003381][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.013542][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.021522][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.047870][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.071405][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.080060][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.109206][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.138471][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.145615][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.172314][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.194046][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.201178][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.227507][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.269288][ T5776] team0: Port device team_slave_0 added [ 84.277933][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.293754][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.317641][ T5776] team0: Port device team_slave_1 added [ 84.343349][ T5770] team0: Port device team_slave_0 added [ 84.386922][ T5770] team0: Port device team_slave_1 added [ 84.407995][ T5775] hsr_slave_0: entered promiscuous mode [ 84.414547][ T5775] hsr_slave_1: entered promiscuous mode [ 84.465289][ T5774] hsr_slave_0: entered promiscuous mode [ 84.472484][ T5774] hsr_slave_1: entered promiscuous mode [ 84.479010][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.487979][ T5774] Cannot create hsr debugfs directory [ 84.495076][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.502075][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.528957][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.542604][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.549681][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.575682][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.636400][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.643402][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.670744][ T5772] Bluetooth: hci0: command tx timeout [ 84.671352][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.676866][ T5772] Bluetooth: hci1: command tx timeout [ 84.693197][ T5772] Bluetooth: hci3: command tx timeout [ 84.701203][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.709430][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.735648][ T5772] Bluetooth: hci2: command tx timeout [ 84.736603][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.828162][ T5776] hsr_slave_0: entered promiscuous mode [ 84.835246][ T5776] hsr_slave_1: entered promiscuous mode [ 84.843421][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.852548][ T5776] Cannot create hsr debugfs directory [ 84.934221][ T5770] hsr_slave_0: entered promiscuous mode [ 84.941458][ T5770] hsr_slave_1: entered promiscuous mode [ 84.948103][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.955858][ T5770] Cannot create hsr debugfs directory [ 85.327310][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.342222][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.353967][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.364606][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.450449][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.463617][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.475572][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.488119][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.586496][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.600265][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.612530][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.630683][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.714213][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.728714][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.741185][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.752544][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.786750][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.836354][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.887624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.895103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.910873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.918091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.973033][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.003261][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.022586][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.029804][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.079264][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.086475][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.171348][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.240542][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.269419][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.283438][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.321258][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.328534][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.341073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.348329][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.374293][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.436993][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.444209][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.514079][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.521354][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.574057][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.663491][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.725532][ T5772] Bluetooth: hci3: command tx timeout [ 86.735628][ T5772] Bluetooth: hci1: command tx timeout [ 86.737445][ T5781] Bluetooth: hci0: command tx timeout [ 86.789529][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.806496][ T5781] Bluetooth: hci2: command tx timeout [ 86.913917][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.973764][ T5774] veth0_vlan: entered promiscuous mode [ 87.030183][ T5774] veth1_vlan: entered promiscuous mode [ 87.115140][ T5775] veth0_vlan: entered promiscuous mode [ 87.142482][ T5775] veth1_vlan: entered promiscuous mode [ 87.169763][ T5774] veth0_macvtap: entered promiscuous mode [ 87.204068][ T5774] veth1_macvtap: entered promiscuous mode [ 87.277659][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.338780][ T5775] veth0_macvtap: entered promiscuous mode [ 87.349723][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.367603][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.377787][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.387093][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.396724][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.418957][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.428961][ T5775] veth1_macvtap: entered promiscuous mode [ 87.487394][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.571090][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.584485][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.596829][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.642960][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.655815][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.668925][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.738993][ T5770] veth0_vlan: entered promiscuous mode [ 87.748957][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761483][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.773110][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.782243][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.833361][ T5776] veth0_vlan: entered promiscuous mode [ 87.905770][ T5770] veth1_vlan: entered promiscuous mode [ 87.942230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.945804][ T5776] veth1_vlan: entered promiscuous mode [ 87.988922][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.108823][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.119600][ T5776] veth0_macvtap: entered promiscuous mode [ 88.135648][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.161256][ T5776] veth1_macvtap: entered promiscuous mode [ 88.183399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.189509][ T5770] veth0_macvtap: entered promiscuous mode [ 88.215066][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.260311][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.270991][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.281915][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.293047][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.306536][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.350407][ T5770] veth1_macvtap: entered promiscuous mode [ 88.391069][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.425481][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.443315][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.459808][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.481050][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.509503][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.523497][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.533759][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.542948][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.559321][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.573930][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.587087][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.600147][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.614219][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.629490][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.641330][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.676253][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.689002][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.699841][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.715712][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.734754][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.750937][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.761583][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.776380][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.788606][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.805040][ T5781] Bluetooth: hci0: command tx timeout [ 88.809327][ T5772] Bluetooth: hci1: command tx timeout [ 88.810549][ T5084] Bluetooth: hci3: command tx timeout [ 88.837993][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.847215][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856659][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.865456][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.895142][ T5781] Bluetooth: hci2: command tx timeout [ 88.986805][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.015673][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.128796][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.153450][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.257970][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.268875][ T5844] 9pnet_fd: Insufficient options for proto=fd [ 89.278999][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.386992][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.412905][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.494246][ T5846] mmap: syz.3.4 (5846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.728638][ T5852] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 90.024572][ T5853] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.220661][ T5864] Zero length message leads to an empty skb [ 90.656645][ C0] Unknown status report in ack skb [ 90.885532][ T5781] Bluetooth: hci1: command tx timeout [ 90.895723][ T5781] Bluetooth: hci0: command tx timeout [ 90.901209][ T5781] Bluetooth: hci3: command tx timeout [ 90.945630][ T5879] process 'syz.2.12' launched './file0' with NULL argv: empty string added [ 90.965391][ T5781] Bluetooth: hci2: command tx timeout [ 91.105480][ T5884] fuse: Unknown parameter 'group_i00000000000000000000' [ 92.371507][ T27] cfg80211: failed to load regulatory.db [ 92.725403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.014108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.055080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.135040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.205591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.295842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.321305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.526330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 94.038445][ T5917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 95.508376][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.194644][ C0] sched: RT throttling activated [ 98.953340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.954298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.224376][ C0] ------------[ cut here ]------------ [ 106.229982][ C0] WARNING: CPU: 0 PID: 5981 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 106.240168][ C0] Modules linked in: [ 106.244241][ C0] CPU: 0 PID: 5981 Comm: syz.0.43 Not tainted syzkaller #0 [ 106.251649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.261940][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 106.268451][ C0] Code: 24 4c 89 e7 e8 ce 2c c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 73 84 f7 0f 0b e9 f6 f7 ff ff e8 fd 72 84 f7 <0f> 0b e9 48 fb ff ff e8 f1 72 84 f7 48 c7 c7 60 52 64 8e 4c 89 e6 [ 106.288306][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 106.294576][ C0] RAX: ffffffff8a02a213 RBX: ffffffff8a029016 RCX: ffff8880217ada00 [ 106.302754][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.310928][ C0] RBP: 0000000000000000 R08: ffff8880217ada00 R09: 0000000000000003 [ 106.313683][ T49] ------------[ cut here ]------------ [ 106.319019][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bcd63c0 [ 106.319047][ C0] R13: dffffc0000000000 R14: ffff88805bcd68b0 R15: ffff8880300c8824 [ 106.319069][ C0] FS: 00007f0140f8b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 106.319088][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.319102][ C0] CR2: fffffffffffffe70 CR3: 0000000025c0e000 CR4: 00000000003506f0 [ 106.319121][ C0] Call Trace: [ 106.319145][ C0] [ 106.319158][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 106.319199][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 106.319228][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 106.319266][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 106.319299][ C0] __iterate_interfaces+0x243/0x500 [ 106.319329][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.319355][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 106.319388][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.319413][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 106.326937][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 106.333091][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 106.345297][ T49] Modules linked in: [ 106.350142][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 106.358756][ T49] [ 106.364727][ C0] ? hw_scan_work+0xf60/0xf60 [ 106.364765][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 106.364790][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 106.364827][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 106.364856][ C0] handle_softirqs+0x280/0x820 [ 106.364885][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 106.368180][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 106.371051][ C0] ? do_softirq+0x1a0/0x1a0 [ 106.376931][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.382090][ C0] __irq_exit_rcu+0xd3/0x190 [ 106.388874][ T49] Workqueue: phy4 ieee80211_csa_finalize_work [ 106.394409][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.399750][ T49] [ 106.405909][ C0] irq_exit_rcu+0x9/0x20 [ 106.405932][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.405957][ C0] [ 106.413144][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 106.419412][ C0] [ 106.419425][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.419451][ C0] RIP: 0010:__rcu_read_lock+0x31/0x60 [ 106.419483][ C0] Code: 8b 1d b3 0e 92 7e 48 81 c3 3c 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 11 ff 03 8b 03 <3d> 00 00 00 40 7d 02 5b c3 0f 0b eb fa 89 d9 80 e1 07 80 c1 03 38 [ 106.426542][ T49] Code: 48 89 df e8 9a f6 d7 f7 e9 dc fc ff ff e8 20 c7 7f f7 eb 24 e8 19 c7 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 c7 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa c6 7f f7 48 8b 7c 24 08 4c 8b 7c [ 106.437317][ C0] RSP: 0000:ffffc90004c9e908 EFLAGS: 00000202 [ 106.437341][ C0] RAX: 0000000000000001 RBX: ffff8880217ade3c RCX: dffffc0000000000 [ 106.437355][ C0] RDX: 0000000000000000 RSI: 000000000778029f RDI: ffffea0001ac1300 [ 106.437369][ C0] RBP: 0000000000000000 R08: 00000000eecbfdbd R09: 0000000028bbeb6e [ 106.437382][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 106.437393][ C0] R13: 0000000000000001 R14: ffffea0001ac1300 R15: ffffea0001ac1300 [ 106.437427][ C0] page_ext_get+0x1b/0x2b0 [ 106.437460][ C0] __set_page_owner+0x28/0x60 [ 106.437495][ C0] post_alloc_hook+0x1c1/0x200 [ 106.437531][ C0] get_page_from_freelist+0x1951/0x19e0 [ 106.437568][ C0] ? mark_lock+0x94/0x320 [ 106.437596][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 106.437630][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 106.437672][ C0] __alloc_pages+0x1f0/0x460 [ 106.437695][ C0] ? zone_statistics+0x170/0x170 [ 106.437735][ C0] __folio_alloc+0x10/0x20 [ 106.437754][ C0] vma_alloc_folio+0x47a/0x8f0 [ 106.437779][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 106.437805][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 106.437833][ C0] ? folio_put+0xd0/0xd0 [ 106.437877][ C0] ? __vm_enough_memory+0x11b/0x370 [ 106.437910][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 106.437937][ C0] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 106.437967][ C0] ? put_swap_device+0x230/0x230 [ 106.437994][ C0] ? xas_load+0x12b/0x140 [ 106.438021][ C0] ? filemap_get_entry+0xce/0x3f0 [ 106.438048][ C0] ? filemap_get_entry+0xce/0x3f0 [ 106.438072][ C0] ? filemap_get_entry+0x379/0x3f0 [ 106.438097][ C0] ? page_cache_prev_miss+0x390/0x390 [ 106.438138][ C0] shmem_get_folio_gfp+0xcde/0x2aa0 [ 106.438191][ C0] shmem_write_begin+0xf2/0x420 [ 106.438223][ C0] generic_perform_write+0x2fe/0x5c0 [ 106.438265][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 106.438288][ C0] ? down_write+0x16e/0x200 [ 106.438328][ C0] ? file_update_time+0x98/0x1a0 [ 106.438357][ C0] shmem_file_write_iter+0xfb/0x120 [ 106.438386][ C0] __kernel_write_iter+0x28c/0x690 [ 106.438422][ C0] ? vfs_read+0x970/0x970 [ 106.438448][ C0] ? get_dump_page+0x156/0x200 [ 106.438482][ C0] ? __asan_memset+0x22/0x40 [ 106.443683][ T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293 [ 106.447613][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 106.447649][ C0] dump_user_range+0x420/0x860 [ 106.447681][ C0] ? dump_skip+0x40/0x40 [ 106.447700][ C0] ? dump_emit+0x78/0xe0 [ 106.447736][ C0] ? dump_emit+0xa6/0xe0 [ 106.447755][ C0] ? elf_core_dump+0x2bae/0x3770 [ 106.447787][ C0] elf_core_dump+0x31d0/0x3770 [ 106.452999][ T49] [ 106.453008][ T49] RAX: ffffffff8a074a0e RBX: 0000000000000001 RCX: ffff88801b6f3c00 [ 106.455393][ C0] ? load_elf_binary+0x2860/0x2860 [ 106.455431][ C0] ? dump_vma_snapshot+0xbe8/0x1090 [ 106.460096][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 106.465239][ C0] ? verify_lock_unused+0x140/0x140 [ 106.471319][ T49] RBP: dffffc0000000000 R08: ffff88805bcd55af R09: 1ffff1100b79aab5 [ 106.476464][ C0] ? mas_next_slot+0x94f/0x980 [ 106.476625][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 106.481258][ T49] R10: dffffc0000000000 R11: ffffed100b79aab6 R12: 0000000000000001 [ 106.486075][ C0] ? 0xffffffffff600000 [ 106.486118][ C0] do_coredump+0x17cc/0x24d0 [ 106.486171][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 106.493518][ T49] R13: ffff88805bcd65d9 R14: ffff888078c82c70 R15: ffff888078c82ce8 [ 106.493553][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 106.493572][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.493587][ T49] CR2: 0000200000021000 CR3: 0000000030755000 CR4: 00000000003506e0 [ 106.493647][ T49] Call Trace: [ 106.498196][ C0] ? lock_chain_count+0x20/0x20 [ 106.508323][ T49] [ 106.512907][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.519248][ T49] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 106.523501][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 106.526016][ T49] ieee80211_csa_finalize+0x5a6/0xf20 [ 106.530126][ C0] get_signal+0x1133/0x13f0 [ 106.538745][ T49] ? mutex_lock_nested+0x20/0x20 [ 106.546074][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 106.546113][ C0] ? get_sigframe_size+0x20/0x20 [ 106.546145][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 106.546183][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.546217][ C0] exit_to_user_mode_loop+0x70/0x110 [ 106.549242][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 106.555256][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 106.555289][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 106.560652][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 106.580468][ C0] exc_page_fault+0x8c/0x100 [ 106.580498][ C0] asm_exc_page_fault+0x26/0x30 [ 106.600349][ T49] ? read_lock_is_recursive+0x20/0x20 [ 106.606240][ C0] RIP: 0033:0x7f014019c631 [ 106.614236][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 106.622268][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 106.622288][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 106.622308][ C0] RAX: 0000000000000000 RBX: 00007f0140415fa0 RCX: 00007f014019c629 [ 106.630336][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 106.638320][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 106.638337][ C0] RBP: 00007f0140232b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.638350][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.638362][ C0] R13: 00007f0140416038 R14: 00007f0140415fa0 R15: 00007fffb5ee92f8 [ 106.638390][ C0] [ 106.638400][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.638408][ C0] CPU: 0 PID: 5981 Comm: syz.0.43 Not tainted syzkaller #0 [ 106.638426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.638436][ C0] Call Trace: [ 106.638443][ C0] [ 106.638449][ C0] dump_stack_lvl+0x18c/0x250 [ 106.638482][ C0] ? show_regs_print_info+0x20/0x20 [ 106.638509][ C0] ? load_image+0x400/0x400 [ 106.638545][ C0] panic+0x2dc/0x730 [ 106.638571][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 106.638608][ C0] __warn+0x2e0/0x470 [ 106.638627][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.638652][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.638674][ C0] report_bug+0x2be/0x4f0 [ 106.638703][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.638726][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.638748][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 106.638770][ C0] handle_bug+0xcf/0x120 [ 106.638799][ C0] exc_invalid_op+0x1a/0x50 [ 106.638827][ C0] asm_exc_invalid_op+0x1a/0x20 [ 106.638847][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 106.638870][ C0] Code: 24 4c 89 e7 e8 ce 2c c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 73 84 f7 0f 0b e9 f6 f7 ff ff e8 fd 72 84 f7 <0f> 0b e9 48 fb ff ff e8 f1 72 84 f7 48 c7 c7 60 52 64 8e 4c 89 e6 [ 106.638886][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 106.638902][ C0] RAX: ffffffff8a02a213 RBX: ffffffff8a029016 RCX: ffff8880217ada00 [ 106.638916][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.638927][ C0] RBP: 0000000000000000 R08: ffff8880217ada00 R09: 0000000000000003 [ 106.638939][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bcd63c0 [ 106.638950][ C0] R13: dffffc0000000000 R14: ffff88805bcd68b0 R15: ffff8880300c8824 [ 106.638969][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 106.638993][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.639027][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 106.639051][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 106.639082][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 106.639109][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 106.639145][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 106.639176][ C0] __iterate_interfaces+0x243/0x500 [ 106.639203][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.639226][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 106.639256][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.639279][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 106.639312][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 106.639335][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 106.639365][ C0] ? hw_scan_work+0xf60/0xf60 [ 106.639392][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 106.639460][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 106.639575][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 106.639662][ C0] handle_softirqs+0x280/0x820 [ 106.639726][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 106.639794][ C0] ? do_softirq+0x1a0/0x1a0 [ 106.639875][ C0] __irq_exit_rcu+0xd3/0x190 [ 106.639928][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.640001][ C0] irq_exit_rcu+0x9/0x20 [ 106.640053][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.640107][ C0] [ 106.640119][ C0] [ 106.640133][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.640197][ C0] RIP: 0010:__rcu_read_lock+0x31/0x60 [ 106.640273][ C0] Code: 8b 1d b3 0e 92 7e 48 81 c3 3c 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 11 ff 03 8b 03 <3d> 00 00 00 40 7d 02 5b c3 0f 0b eb fa 89 d9 80 e1 07 80 c1 03 38 [ 106.640307][ C0] RSP: 0000:ffffc90004c9e908 EFLAGS: 00000202 [ 106.640349][ C0] RAX: 0000000000000001 RBX: ffff8880217ade3c RCX: dffffc0000000000 [ 106.640381][ C0] RDX: 0000000000000000 RSI: 000000000778029f RDI: ffffea0001ac1300 [ 106.640421][ C0] RBP: 0000000000000000 R08: 00000000eecbfdbd R09: 0000000028bbeb6e [ 106.640458][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 106.640482][ C0] R13: 0000000000000001 R14: ffffea0001ac1300 R15: ffffea0001ac1300 [ 106.640565][ C0] page_ext_get+0x1b/0x2b0 [ 106.640657][ C0] __set_page_owner+0x28/0x60 [ 106.640742][ C0] post_alloc_hook+0x1c1/0x200 [ 106.640821][ C0] get_page_from_freelist+0x1951/0x19e0 [ 106.640957][ C0] ? mark_lock+0x94/0x320 [ 106.641037][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 106.641120][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 106.641221][ C0] __alloc_pages+0x1f0/0x460 [ 106.641275][ C0] ? zone_statistics+0x170/0x170 [ 106.641377][ C0] __folio_alloc+0x10/0x20 [ 106.641421][ C0] vma_alloc_folio+0x47a/0x8f0 [ 106.641476][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 106.641537][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 106.641608][ C0] ? folio_put+0xd0/0xd0 [ 106.641712][ C0] ? __vm_enough_memory+0x11b/0x370 [ 106.641798][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 106.641863][ C0] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 106.641935][ C0] ? put_swap_device+0x230/0x230 [ 106.642007][ C0] ? xas_load+0x12b/0x140 [ 106.642088][ C0] ? filemap_get_entry+0xce/0x3f0 [ 106.642137][ C0] ? filemap_get_entry+0xce/0x3f0 [ 106.642189][ C0] ? filemap_get_entry+0x379/0x3f0 [ 106.642241][ C0] ? page_cache_prev_miss+0x390/0x390 [ 106.642367][ C0] shmem_get_folio_gfp+0xcde/0x2aa0 [ 106.642495][ C0] shmem_write_begin+0xf2/0x420 [ 106.642583][ C0] generic_perform_write+0x2fe/0x5c0 [ 106.642676][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 106.642727][ C0] ? down_write+0x16e/0x200 [ 106.642821][ C0] ? file_update_time+0x98/0x1a0 [ 106.642890][ C0] shmem_file_write_iter+0xfb/0x120 [ 106.642953][ C0] __kernel_write_iter+0x28c/0x690 [ 106.643051][ C0] ? vfs_read+0x970/0x970 [ 106.643106][ C0] ? get_dump_page+0x156/0x200 [ 106.643196][ C0] ? __asan_memset+0x22/0x40 [ 106.643260][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 106.643367][ C0] dump_user_range+0x420/0x860 [ 106.643460][ C0] ? dump_skip+0x40/0x40 [ 106.643503][ C0] ? dump_emit+0x78/0xe0 [ 106.643588][ C0] ? dump_emit+0xa6/0xe0 [ 106.643643][ C0] ? elf_core_dump+0x2bae/0x3770 [ 106.643748][ C0] elf_core_dump+0x31d0/0x3770 [ 106.643872][ C0] ? load_elf_binary+0x2860/0x2860 [ 106.643953][ C0] ? dump_vma_snapshot+0xbe8/0x1090 [ 106.644007][ C0] ? verify_lock_unused+0x140/0x140 [ 106.644080][ C0] ? mas_next_slot+0x94f/0x980 [ 106.644238][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 106.644300][ C0] ? 0xffffffffff600000 [ 106.644384][ C0] do_coredump+0x17cc/0x24d0 [ 106.644488][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 106.644604][ C0] ? lock_chain_count+0x20/0x20 [ 106.644680][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.644740][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 106.644782][ C0] get_signal+0x1133/0x13f0 [ 106.644878][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 106.644973][ C0] ? get_sigframe_size+0x20/0x20 [ 106.645074][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 106.645186][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.645269][ C0] exit_to_user_mode_loop+0x70/0x110 [ 106.645348][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 106.645423][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 106.645483][ C0] exc_page_fault+0x8c/0x100 [ 106.645546][ C0] asm_exc_page_fault+0x26/0x30 [ 106.645598][ C0] RIP: 0033:0x7f014019c631 [ 106.645642][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 106.645682][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 106.645723][ C0] RAX: 0000000000000000 RBX: 00007f0140415fa0 RCX: 00007f014019c629 [ 106.645762][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 106.645797][ C0] RBP: 00007f0140232b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.645829][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.645859][ C0] R13: 00007f0140416038 R14: 00007f0140415fa0 R15: 00007fffb5ee92f8 [ 106.645940][ C0] [ 106.647922][ C0] Kernel Offset: disabled