last executing test programs: 35.469969703s ago: executing program 0 (id=35): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(r0, &(0x7f0000000100)=""/162, 0xa2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) 32.482315448s ago: executing program 3 (id=38): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="9e053116a9196e0b9664fb835a3a5cdf85a9fd22a7fa463d02ce8cf4db269cc39c613680a52ffa2ffe93ad7054f0a77f15395ce0b86ed943b0d8e4d56ded0b47f08415bfc02f605c6b3ddac2f8fbcb378d5c017996de67447f0d2e0c8ef421c70f8d442bb64983f218b55ef14d033507c7b0bbab37345840534509f6050e1084dba94bff98a2543ff657ea4c2a02a67df59f3620a81535c4d8cecc2ea37d0629ab27a829638b9ee601dffffd1bd0166edbe194087afaad848fdbb3f10878784bed53d76150277ca861ef55b838c213651e55a6cdfbbc84ae901ce35508412a22", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="5bab79ce36b4663252d6c2d7a592ce3714d785ca76542241b840728934cd3900ea96a7a964c54cf7549e4252b2b3b3db1a50881a66d047536414edc47a1e0f9dc6efdf1ee0826fb83276936ecf9194fb864eaac04a245d5adfe9dde878e2184b1d1624b7f0d46f365cadbf73db6f6202ca50c84d370ac7e910d3ece707b5d9537cf88701079707da7f2b3ca02e02d49fd382db59a70d00d38e658ce60a56cfccc03dbbcd9421737342acdff9972a7d"], 0x1, 0x6e4, &(0x7f0000001a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 30.410751599s ago: executing program 3 (id=40): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 28.427977595s ago: executing program 3 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.527874735s ago: executing program 3 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xff97}}], 0x400000000000172, 0x4000000) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='hsr0\x00') syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2000002, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x0, 0x1a1, &(0x7f0000000440)="$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") r3 = creat(0x0, 0xecf86c37d53049cc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x11, 0xc94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, [0xffffffff]}}) write$sndseq(r3, &(0x7f00000000c0)=[{0x9, 0x9, 0x0, 0x8, @time={0x402, 0x3}, {0x40, 0x71}, {0x5, 0x8}, @addr={0x0, 0x2}}], 0x1c) close(r3) 15.931994027s ago: executing program 2 (id=50): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="9e053116a9196e0b9664fb835a3a5cdf85a9fd22a7fa463d02ce8cf4db269cc39c613680a52ffa2ffe93ad7054f0a77f15395ce0b86ed943b0d8e4d56ded0b47f08415bfc02f605c6b3ddac2f8fbcb378d5c017996de67447f0d2e0c8ef421c70f8d442bb64983f218b55ef14d033507c7b0bbab37345840534509f6050e1084dba94bff98a2543ff657ea4c2a02a67df59f3620a81535c4d8cecc2ea37d0629ab27a829638b9ee601dffffd1bd0166edbe194087afaad848fdbb3f10878784bed53d76150277ca861ef55b838c213651e55a6cdfbbc84ae901ce35508412a22", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="5bab79ce36b4663252d6c2d7a592ce3714d785ca76542241b840728934cd3900ea96a7a964c54cf7549e4252b2b3b3db1a50881a66d047536414edc47a1e0f9dc6efdf1ee0826fb83276936ecf9194fb864eaac04a245d5adfe9dde878e2184b1d1624b7f0d46f365cadbf73db6f6202ca50c84d370ac7e910d3ece707b5d9537cf88701079707da7f2b3ca02e02d49fd382db59a70d00d38e658ce60a56cfccc03dbbcd9421737342acdff9972a7d"], 0x1, 0x6e4, &(0x7f0000001a40)="$eJzs3U9sHFcdB/DvrNeON1TFaRMaoSKsRCpIEYkTK4VwwSCEcqhQVSR6thKnsbpJqsRFaYXAhQpOSBx6RgXJNw4IiXsgXLiUW68+VkLiEnGIelk0s7PrXXsd20m8juHziSbz3rw/85s3b2Z211ptgP9bl8+keS9FLp957W6ZX1+bb6+vzR+pi9tJynQjaXZXKW4mxf1koSwvBpYMrLf4aPnSG58+WP+sm2vWS1V/ot9uelchj9jHar1ktu5vdmTLyV313+2rOrw8l+RKvR42tdu+hiqWvZ5Or3c4YJ0tVvfSfNvrHXj29Z5ORfe5ucVMcrR+MlevCeq7Q2N8Ee6PPd3lAAAA4JD65NZBRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHT/37/0W9NOp1ZlP0fv9/qretTj+DFnZd896+xgEAAAAAAAAA4/HVh3mYu3m+l+8U1d/8T1WZ4/m8k3wh7+ZOlnI7Z3M3i1nJSm7nfJKZgY6m7i6urNw+329ZGt3ywsiWF8Z1xAAAAAAAAADwP+kXaW38/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRTLRXVXL8XqdmTSa2SjLavLPJFMHHe8eFKM23ht/HAAAAPBEph+jzRcf5mHu5vlevlNU7/m/VL1fns67uZmVLGcl7Szlav0eunzX31hfm2+vr83fKJcyP9zvd/+9pzCm6h4mqtyoPZ+sarRyLcvVlrO5UgVzNY3uvk8nJ3vxDMQ14IMypuI7tV1G1qyHtdzZb7f7FOGpGP4oovGImq2N4JL+iMzVsZUtj3VHoKg+qEk2j8SOZ6c5lJupep3s7+l8Gv1Pfo7vw5gfrdfl8fxqX8d8r/oj0Ug1Ehd6s6+8Zh49EsnX/vLHN6+3b759/dqdM8/OIe1gYpvtm+fE/MBIvHSoR6K5x/pz1Uic6Ocv5wf5Uc5kNq/ndpbzkzSykqV06vLFej6X/888eqQWhnKv7xTJVH1euufsd3/78Me9ktV6vRHTYhXTbL5fpRZzqmr7fJZT5FauZimvVv8u5Hy+mYu5mEsDZ/jEtnFXx1Zd9Y3NV33vTP91ZPCnv14nyrvbrzfucguPOuLtZufT0r33l+N6rL+33qx/0K91bOA6mBsYpRd6ozM5svPHuTc2v1wnyn38cofnxHjN1CNRXkC9p0Qvuhe7I9GsnkVb5/nvO2W7tG92OtcX39mm/9VN+VfqdTmt1r6yU+2e0afi6SrnywuZru8kw7OjLHuxf5cZKOtszOVu2fATt2x3oiorit6V+sPcqibA1it1qn4Nt7WnC1XZSyPL5quykwNl9eutiZSvt3Ir7Vwdw/gB8Dj+8WY/OZOjU61/tT5pfdz6sHW99dr0945868jLU5n8++S3m3MTrzReLv6cj/Ozjff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA47vz3vtvL7bbS7dHJxrbFw0lWtm8Zbuej4zup6h/0GcX+zoUiekkQ1uq3zkaexitzWFsSXR+nox9fHo/Iji6zm/KRHPLjBqVWBja8qetHX6wxwiL3V0X+5hoZLw7ncjoCXCANyVgLM6t3Hjn3J333v/G8o3Ft5beWro5efHipblLF1+dP3dtub001/3/oKME9sPGQ/+gIwEAAAAAAAAAAAB2a9QXA049t9OXRnb1HY/+lqMHfZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoXb5TJr3UuT83Nm5Mr++Nt8ul156o2YzSaORFD9NivvJQrpLZga6K/KH++mM2M9Hy5fe+PTB+mcbfTW79ZNGvd7eo0uTrNZLZpNM1OsnMNTflSfur/hP7xjKAfu80+ksPFl88HT8NwAA//8y0fXQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 15.868701051s ago: executing program 0 (id=51): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, r0, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000040000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r7, 0x0, 0x0}, 0x10) fanotify_mark(0xffffffffffffffff, 0x7e, 0x8001010, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 13.9979551s ago: executing program 0 (id=52): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex(0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) 12.842101038s ago: executing program 1 (id=53): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005}) 12.744014054s ago: executing program 3 (id=54): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x80}, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.653028118s ago: executing program 1 (id=55): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1b) readv(r4, &(0x7f0000000600)=[{0x0}], 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="260a00000000000061119c0000000000180000000000000000000000000000009500000000000000eb1249ca58eed7ca1c3d9303a7df8a927e710c78b14ad1b7feea5688ef2f07322696913ea0f5fc1344044fcbcacd881878538323e0253efe22922ae4c17bb9b3de4240d2ff74deb284853aa4355e8e6a7e88671f317c2275c4fc98d1ed95542a83fe0b1e1f02f7cb8a36c03cc83d6a79d9083e02aa1474beef0c420dd5a6b7244306"], &(0x7f0000000000)='GPL\x00'}, 0x80) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x241}, {0xffffffffffffffff, 0x9002}, {0xffffffffffffffff, 0x85}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4468}, {r5, 0x80}], 0x6, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x6]}, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 10.796267388s ago: executing program 2 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f00000000c0)={0x1f, @none, 0x80}, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r5) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.466760333s ago: executing program 0 (id=58): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.83121955s ago: executing program 1 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 4.77905198s ago: executing program 1 (id=60): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1b) readv(r4, &(0x7f0000000600)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="260a00000000000061119c0000000000180000000000000000000000000000009500000000000000eb1249ca58eed7ca1c3d9303a7df8a927e710c78b14ad1b7feea5688ef2f07322696913ea0f5fc1344044fcbcacd881878538323e0253efe22922ae4c17bb9b3de4240d2ff74deb284853aa4355e8e6a7e88671f317c2275c4fc98d1ed95542a83fe0b1e1f02f7cb8a36c03cc83d6a79d9083e02aa1474beef0c420dd5a6b7244306"], &(0x7f0000000000)='GPL\x00'}, 0x80) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x241}, {0xffffffffffffffff, 0x9002}, {0xffffffffffffffff, 0x85}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x4468}, {r6, 0x80}], 0x6, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x6]}, 0x8) 3.520136954s ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x80a0000, 0xeeef0000, 0xddcd0004, 0xb000], 0xdb, 0xc}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0x8000000000000006, 0x8000000, 0x41, 0xa000001, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0, 0x100000000, 0x3, 0x0, 0x3, 0x2], 0xffff1000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.321723634s ago: executing program 2 (id=62): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.233803058s ago: executing program 2 (id=63): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005}) 148.382602ms ago: executing program 2 (id=64): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="9e053116a9196e0b9664fb835a3a5cdf85a9fd22a7fa463d02ce8cf4db269cc39c613680a52ffa2ffe93ad7054f0a77f15395ce0b86ed943b0d8e4d56ded0b47f08415bfc02f605c6b3ddac2f8fbcb378d5c017996de67447f0d2e0c8ef421c70f8d442bb64983f218b55ef14d033507c7b0bbab37345840534509f6050e1084dba94bff98a2543ff657ea4c2a02a67df59f3620a81535c4d8cecc2ea37d0629ab27a829638b9ee601dffffd1bd0166edbe194087afaad848fdbb3f10878784bed53d76150277ca861ef55b838c213651e55a6cdfbbc84ae901ce35508412a22", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="5bab79ce36b4663252d6c2d7a592ce3714d785ca76542241b840728934cd3900ea96a7a964c54cf7549e4252b2b3b3db1a50881a66d047536414edc47a1e0f9dc6efdf1ee0826fb83276936ecf9194fb864eaac04a245d5adfe9dde878e2184b1d1624b7f0d46f365cadbf73db6f6202ca50c84d370ac7e910d3ece707b5d9537cf88701079707da7f2b3ca02e02d49fd382db59a70d00d38e658ce60a56cfccc03dbbcd9421737342acdff9972a7d"], 0x1, 0x6e4, &(0x7f0000001a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 0s ago: executing program 3 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee01, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 82.380032][ T5753] cgroup: Unknown subsys name 'net' [ 82.494798][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.288616][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.077722][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.087160][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.095108][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.103944][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.111957][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.112709][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.120246][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.130988][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.142318][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.151500][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.159110][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.160126][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.173587][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.174644][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.190483][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.199796][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.207146][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.208215][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.234078][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.249506][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.275275][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.284997][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.297567][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.308071][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.779423][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 86.913456][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 86.982221][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 87.011088][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.018587][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.028268][ T5766] bridge_slave_0: entered allmulticast mode [ 87.035494][ T5766] bridge_slave_0: entered promiscuous mode [ 87.050091][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 87.085780][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.093820][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.101268][ T5766] bridge_slave_1: entered allmulticast mode [ 87.108604][ T5766] bridge_slave_1: entered promiscuous mode [ 87.156013][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.174614][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.339593][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.350736][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.359807][ T5764] bridge_slave_0: entered allmulticast mode [ 87.371357][ T5764] bridge_slave_0: entered promiscuous mode [ 87.382570][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.393561][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.402267][ T5764] bridge_slave_1: entered allmulticast mode [ 87.413666][ T5764] bridge_slave_1: entered promiscuous mode [ 87.445491][ T5766] team0: Port device team_slave_0 added [ 87.501792][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.510374][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.522445][ T5765] bridge_slave_0: entered allmulticast mode [ 87.530736][ T5765] bridge_slave_0: entered promiscuous mode [ 87.546406][ T5766] team0: Port device team_slave_1 added [ 87.553508][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.561629][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.569170][ T5765] bridge_slave_1: entered allmulticast mode [ 87.576978][ T5765] bridge_slave_1: entered promiscuous mode [ 87.624638][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.659367][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.666810][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.674051][ T5767] bridge_slave_0: entered allmulticast mode [ 87.681896][ T5767] bridge_slave_0: entered promiscuous mode [ 87.706818][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.742266][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.761487][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.773166][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.804029][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.818624][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.825638][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.851753][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.863425][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.871632][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.879561][ T5767] bridge_slave_1: entered allmulticast mode [ 87.887939][ T5767] bridge_slave_1: entered promiscuous mode [ 87.911488][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.013762][ T5764] team0: Port device team_slave_0 added [ 88.047221][ T5765] team0: Port device team_slave_0 added [ 88.057472][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.070141][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.082009][ T5764] team0: Port device team_slave_1 added [ 88.104707][ T5766] hsr_slave_0: entered promiscuous mode [ 88.112011][ T5766] hsr_slave_1: entered promiscuous mode [ 88.121636][ T5765] team0: Port device team_slave_1 added [ 88.186485][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.193532][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.223052][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.236822][ T5776] Bluetooth: hci2: command tx timeout [ 88.253599][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.260963][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.287217][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.302854][ T5767] team0: Port device team_slave_0 added [ 88.308869][ T5776] Bluetooth: hci1: command tx timeout [ 88.318468][ T5767] team0: Port device team_slave_1 added [ 88.325094][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.332196][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.358578][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.386018][ T5080] Bluetooth: hci0: command tx timeout [ 88.391766][ T5776] Bluetooth: hci3: command tx timeout [ 88.402429][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.409555][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.435542][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.512654][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.519711][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.547398][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.580743][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.588139][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.614286][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.677946][ T5765] hsr_slave_0: entered promiscuous mode [ 88.684688][ T5765] hsr_slave_1: entered promiscuous mode [ 88.691322][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.699432][ T5765] Cannot create hsr debugfs directory [ 88.765356][ T5764] hsr_slave_0: entered promiscuous mode [ 88.774749][ T5764] hsr_slave_1: entered promiscuous mode [ 88.781312][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.789095][ T5764] Cannot create hsr debugfs directory [ 88.819389][ T5767] hsr_slave_0: entered promiscuous mode [ 88.826307][ T5767] hsr_slave_1: entered promiscuous mode [ 88.832581][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.841076][ T5767] Cannot create hsr debugfs directory [ 89.197825][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.211739][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.254122][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.267769][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.348594][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.368433][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.386481][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.401425][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.501133][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.516999][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.531208][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.547056][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.679916][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.692345][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.717406][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.730275][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.830675][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.858585][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.878452][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.928164][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.939175][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.962334][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.969721][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.981198][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.988454][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.045240][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.052847][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.063556][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.070795][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.084020][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.112169][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.119414][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.152304][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.159565][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.307786][ T5776] Bluetooth: hci2: command tx timeout [ 90.383341][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.396912][ T5776] Bluetooth: hci1: command tx timeout [ 90.467323][ T5776] Bluetooth: hci3: command tx timeout [ 90.472841][ T5776] Bluetooth: hci0: command tx timeout [ 90.502927][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.565528][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.572809][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.668930][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.676208][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.831894][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.929641][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.962027][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.984593][ T5764] veth0_vlan: entered promiscuous mode [ 91.044943][ T5764] veth1_vlan: entered promiscuous mode [ 91.129998][ T5766] veth0_vlan: entered promiscuous mode [ 91.177276][ T5766] veth1_vlan: entered promiscuous mode [ 91.204576][ T5764] veth0_macvtap: entered promiscuous mode [ 91.223921][ T5764] veth1_macvtap: entered promiscuous mode [ 91.252806][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.285176][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.308866][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.328105][ T5765] veth0_vlan: entered promiscuous mode [ 91.358749][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372136][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.381328][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.393490][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.407509][ T5766] veth0_macvtap: entered promiscuous mode [ 91.444669][ T5766] veth1_macvtap: entered promiscuous mode [ 91.470236][ T5765] veth1_vlan: entered promiscuous mode [ 91.487321][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.501023][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.515225][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.552753][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.563773][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.575936][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.611969][ T5767] veth0_vlan: entered promiscuous mode [ 91.632095][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.644234][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654762][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.663645][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.701406][ T5765] veth0_macvtap: entered promiscuous mode [ 91.741741][ T5765] veth1_macvtap: entered promiscuous mode [ 91.772683][ T5767] veth1_vlan: entered promiscuous mode [ 91.823500][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.825108][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.854172][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.860957][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.923791][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.935208][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.949684][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.960311][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.975113][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.004590][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.014524][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.021971][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.022023][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.022035][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.022049][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.029127][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.089471][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.098817][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.108419][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.117678][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.133923][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.162141][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.211319][ T5767] veth0_macvtap: entered promiscuous mode [ 92.255702][ T5767] veth1_macvtap: entered promiscuous mode [ 92.324119][ T23] cfg80211: failed to load regulatory.db [ 92.380587][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.397940][ T5776] Bluetooth: hci2: command tx timeout [ 92.416095][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459679][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.476037][ T5776] Bluetooth: hci1: command tx timeout [ 92.490977][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.501339][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.511997][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.524985][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.546700][ T5080] Bluetooth: hci3: command tx timeout [ 92.552239][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.552330][ T5776] Bluetooth: hci0: command tx timeout [ 92.573336][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.586011][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.599542][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.610189][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.613376][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.620145][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.620167][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.625019][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.666874][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.736121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.145867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 93.452765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.453456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.469686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.657657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.658050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.677781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 94.775711][ T5776] Bluetooth: hci2: command tx timeout [ 94.775774][ T51] Bluetooth: hci0: command tx timeout [ 94.782942][ T5776] Bluetooth: hci3: command tx timeout [ 94.793853][ T5080] Bluetooth: hci1: command tx timeout [ 94.868091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.001040][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.022260][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.035282][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.039144][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.044729][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.064775][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369950][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.987056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.232627][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.825909][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.887375][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.591933][ T5919] syz.2.15[5919]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 107.621374][ T5919] loop2: detected capacity change from 0 to 8 [ 108.668873][ T5919] SQUASHFS error: lzo decompression failed, data probably corrupt [ 108.700556][ T5919] SQUASHFS error: Failed to read block 0x91: -5 [ 108.727576][ T5919] SQUASHFS error: Unable to read metadata cache entry [8f] [ 108.734870][ T5919] SQUASHFS error: Unable to read inode 0x11f [ 115.403528][ T5937] loop1: detected capacity change from 0 to 1024 [ 115.415714][ T5937] ======================================================= [ 115.415714][ T5937] WARNING: The mand mount option has been deprecated and [ 115.415714][ T5937] and is ignored by this kernel. Remove the mand [ 115.415714][ T5937] option from the mount to silence this warning. [ 115.415714][ T5937] ======================================================= [ 134.686658][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.693445][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.632662][ T5995] loop3: detected capacity change from 0 to 512 [ 136.711590][ T5995] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.36: corrupted in-inode xattr: invalid ea_ino [ 136.747096][ T5995] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.36: couldn't read orphan inode 15 (err -117) [ 136.780661][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.723924][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.629690][ T6009] loop3: detected capacity change from 0 to 1024 [ 143.687621][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.083786][ T6080] loop2: detected capacity change from 0 to 1024 [ 170.276548][ T6116] loop2: detected capacity change from 0 to 1024 [ 172.301482][ C0] ------------[ cut here ]------------ [ 172.307395][ C0] WARNING: CPU: 0 PID: 6123 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 172.317462][ C0] Modules linked in: [ 172.321391][ C0] CPU: 0 PID: 6123 Comm: syz.3.65 Not tainted syzkaller #0 [ 172.328619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.338716][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 172.345061][ C0] Code: 24 4c 89 e7 e8 de 52 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 99 84 f7 0f 0b e9 f6 f7 ff ff e8 2d 99 84 f7 <0f> 0b e9 48 fb ff ff e8 21 99 84 f7 48 c7 c7 e0 50 64 8e 4c 89 e6 [ 172.364718][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 172.370975][ C0] RAX: ffffffff8a027b83 RBX: ffffffff8a026986 RCX: ffff888030463c00 [ 172.379013][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.387050][ C0] RBP: 0000000000000000 R08: ffff888030463c00 R09: 0000000000000003 [ 172.395034][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807cf023c0 [ 172.403060][ C0] R13: dffffc0000000000 R14: ffff88807cf028b0 R15: ffff888146ea5024 [ 172.411137][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 172.420112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.426735][ C0] CR2: 0000001b2d513ff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 172.434725][ C0] Call Trace: [ 172.438070][ C0] [ 172.440929][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 172.446534][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 172.452015][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 172.458821][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 172.464390][ C0] __iterate_interfaces+0x243/0x500 [ 172.469637][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 172.475943][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.483194][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 172.489473][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 172.496569][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 172.501788][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 172.507206][ C0] ? hw_scan_work+0xf60/0xf60 [ 172.511905][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 172.517066][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 172.523163][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 172.528317][ C0] handle_softirqs+0x280/0x820 [ 172.533101][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 172.537909][ C0] ? do_softirq+0x1a0/0x1a0 [ 172.542442][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 172.547683][ C0] __irq_exit_rcu+0xd3/0x190 [ 172.552307][ C0] ? irq_exit_rcu+0x20/0x20 [ 172.556849][ C0] irq_exit_rcu+0x9/0x20 [ 172.561117][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 172.566804][ C0] [ 172.569766][ C0] [ 172.572711][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.578735][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 172.584557][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca ad da f6 48 89 df e8 82 82 db f6 e8 0d 8e ff f6 fb bf 01 00 00 00 92 88 ce f6 65 8b 05 63 bf 75 75 85 c0 74 02 5b c3 e8 e0 a6 72 [ 172.604206][ C0] RSP: 0018:ffffc900056d7358 EFLAGS: 00000282 [ 172.610321][ C0] RAX: b9e9593fc9827d00 RBX: ffff88807aa5b2e0 RCX: b9e9593fc9827d00 [ 172.618358][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 172.626395][ C0] RBP: ffffc900056d7630 R08: ffffffff911bf517 R09: 1ffffffff2237ea2 [ 172.634393][ C0] R10: dffffc0000000000 R11: fffffbfff2237ea3 R12: dffffc0000000000 [ 172.642548][ C0] R13: 1ffff1100f54b65b R14: ffff88807aa5b2d8 R15: ffff88807aa5b2e0 [ 172.650578][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.655852][ C0] filemap_remove_folio+0xf9/0x2c0 [ 172.661011][ C0] truncate_inode_folio+0x5d/0x70 [ 172.666080][ C0] shmem_undo_range+0x418/0x1b20 [ 172.671051][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 172.676296][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.682312][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 172.687559][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 172.693388][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 172.698476][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 172.703521][ C0] shmem_evict_inode+0x245/0x9e0 [ 172.708500][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 172.714243][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 172.719937][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 172.725678][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 172.730747][ C0] ? bit_waitqueue+0x30/0x30 [ 172.735530][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 172.740774][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 172.746365][ C0] evict+0x4ca/0x8d0 [ 172.750281][ C0] ? proc_nr_inodes+0x230/0x230 [ 172.755147][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 172.760421][ C0] ? _raw_spin_unlock+0x28/0x40 [ 172.765290][ C0] ? iput+0x706/0x920 [ 172.769345][ C0] __dentry_kill+0x431/0x650 [ 172.773961][ C0] dentry_kill+0xb8/0x290 [ 172.778330][ C0] ? dput+0x3b/0x1e0 [ 172.782241][ C0] dput+0xfe/0x1e0 [ 172.786000][ C0] __fput+0x5e5/0x970 [ 172.790041][ C0] task_work_run+0x1d4/0x260 [ 172.794653][ C0] ? task_work_cancel+0x220/0x220 [ 172.799815][ C0] do_exit+0x95a/0x2460 [ 172.804019][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 172.809263][ C0] ? put_task_struct+0xc0/0xc0 [ 172.814084][ C0] ? lock_chain_count+0x20/0x20 [ 172.819006][ C0] do_group_exit+0x21b/0x2d0 [ 172.823616][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 172.828856][ C0] get_signal+0x12fc/0x13f0 [ 172.833388][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 172.838979][ C0] ? get_sigframe_size+0x20/0x20 [ 172.843945][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.849971][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 172.855481][ C0] exit_to_user_mode_loop+0x70/0x110 [ 172.860883][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 172.866531][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 172.872021][ C0] exc_page_fault+0x8c/0x100 [ 172.876658][ C0] asm_exc_page_fault+0x26/0x30 [ 172.881522][ C0] RIP: 0033:0x7f6d290514f7 [ 172.885991][ C0] Code: Unable to access opcode bytes at 0x7f6d290514cd. [ 172.893020][ C0] RSP: 002b:00007f6d29ff3120 EFLAGS: 00010202 [ 172.899127][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f6d2919aeb9 [ 172.907134][ C0] RDX: 00007f6d29ff3140 RSI: 00007f6d29ff3270 RDI: 000000000000000b [ 172.915131][ C0] RBP: 00007f6d29208c1f R08: 0000000000000000 R09: 0000000000000000 [ 172.923157][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.931205][ C0] R13: 00007f6d29416128 R14: 00007f6d29416090 R15: 00007ffc35b765d8 [ 172.939275][ C0] [ 172.942314][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.949636][ C0] CPU: 0 PID: 6123 Comm: syz.3.65 Not tainted syzkaller #0 [ 172.956839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.966926][ C0] Call Trace: [ 172.970214][ C0] [ 172.973091][ C0] dump_stack_lvl+0x18c/0x250 [ 172.977787][ C0] ? show_regs_print_info+0x20/0x20 [ 172.982995][ C0] ? load_image+0x400/0x400 [ 172.987532][ C0] panic+0x2dc/0x730 [ 172.991459][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 172.996001][ C0] __warn+0x2e0/0x470 [ 173.000008][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.005743][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.011524][ C0] report_bug+0x2be/0x4f0 [ 173.015882][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.021640][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.027376][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 173.033110][ C0] handle_bug+0xcf/0x120 [ 173.037371][ C0] exc_invalid_op+0x1a/0x50 [ 173.041891][ C0] asm_exc_invalid_op+0x1a/0x20 [ 173.046776][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 173.053121][ C0] Code: 24 4c 89 e7 e8 de 52 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 99 84 f7 0f 0b e9 f6 f7 ff ff e8 2d 99 84 f7 <0f> 0b e9 48 fb ff ff e8 21 99 84 f7 48 c7 c7 e0 50 64 8e 4c 89 e6 [ 173.072744][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 173.078840][ C0] RAX: ffffffff8a027b83 RBX: ffffffff8a026986 RCX: ffff888030463c00 [ 173.086876][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.094933][ C0] RBP: 0000000000000000 R08: ffff888030463c00 R09: 0000000000000003 [ 173.102932][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807cf023c0 [ 173.110918][ C0] R13: dffffc0000000000 R14: ffff88807cf028b0 R15: ffff888146ea5024 [ 173.118953][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 173.124529][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.130273][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.136017][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 173.141606][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 173.147076][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 173.153859][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 173.159428][ C0] __iterate_interfaces+0x243/0x500 [ 173.164639][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 173.170887][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 173.178102][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 173.184356][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 173.191409][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 173.196625][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 173.201842][ C0] ? hw_scan_work+0xf60/0xf60 [ 173.206536][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 173.211663][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 173.217770][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 173.222920][ C0] handle_softirqs+0x280/0x820 [ 173.227726][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 173.232504][ C0] ? do_softirq+0x1a0/0x1a0 [ 173.237018][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 173.242242][ C0] __irq_exit_rcu+0xd3/0x190 [ 173.246942][ C0] ? irq_exit_rcu+0x20/0x20 [ 173.251545][ C0] irq_exit_rcu+0x9/0x20 [ 173.255832][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 173.261513][ C0] [ 173.264492][ C0] [ 173.267434][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.273456][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 173.279276][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca ad da f6 48 89 df e8 82 82 db f6 e8 0d 8e ff f6 fb bf 01 00 00 00 92 88 ce f6 65 8b 05 63 bf 75 75 85 c0 74 02 5b c3 e8 e0 a6 72 [ 173.298901][ C0] RSP: 0018:ffffc900056d7358 EFLAGS: 00000282 [ 173.304985][ C0] RAX: b9e9593fc9827d00 RBX: ffff88807aa5b2e0 RCX: b9e9593fc9827d00 [ 173.312974][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 173.320958][ C0] RBP: ffffc900056d7630 R08: ffffffff911bf517 R09: 1ffffffff2237ea2 [ 173.328949][ C0] R10: dffffc0000000000 R11: fffffbfff2237ea3 R12: dffffc0000000000 [ 173.336942][ C0] R13: 1ffff1100f54b65b R14: ffff88807aa5b2d8 R15: ffff88807aa5b2e0 [ 173.344937][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.350149][ C0] filemap_remove_folio+0xf9/0x2c0 [ 173.355279][ C0] truncate_inode_folio+0x5d/0x70 [ 173.360332][ C0] shmem_undo_range+0x418/0x1b20 [ 173.365292][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 173.370528][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 173.376531][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 173.381774][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 173.387510][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 173.392542][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 173.397582][ C0] shmem_evict_inode+0x245/0x9e0 [ 173.402533][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 173.408262][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 173.413828][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 173.419564][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 173.424601][ C0] ? bit_waitqueue+0x30/0x30 [ 173.429224][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 173.434492][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 173.440057][ C0] evict+0x4ca/0x8d0 [ 173.443973][ C0] ? proc_nr_inodes+0x230/0x230 [ 173.448834][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 173.454049][ C0] ? _raw_spin_unlock+0x28/0x40 [ 173.458937][ C0] ? iput+0x706/0x920 [ 173.463108][ C0] __dentry_kill+0x431/0x650 [ 173.467715][ C0] dentry_kill+0xb8/0x290 [ 173.472067][ C0] ? dput+0x3b/0x1e0 [ 173.475983][ C0] dput+0xfe/0x1e0 [ 173.479721][ C0] __fput+0x5e5/0x970 [ 173.483735][ C0] task_work_run+0x1d4/0x260 [ 173.488339][ C0] ? task_work_cancel+0x220/0x220 [ 173.493387][ C0] do_exit+0x95a/0x2460 [ 173.497558][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 173.502682][ C0] ? put_task_struct+0xc0/0xc0 [ 173.507470][ C0] ? lock_chain_count+0x20/0x20 [ 173.512332][ C0] do_group_exit+0x21b/0x2d0 [ 173.516940][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 173.522147][ C0] get_signal+0x12fc/0x13f0 [ 173.526675][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 173.532247][ C0] ? get_sigframe_size+0x20/0x20 [ 173.537234][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 173.543234][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 173.548708][ C0] exit_to_user_mode_loop+0x70/0x110 [ 173.554007][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 173.559602][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 173.565072][ C0] exc_page_fault+0x8c/0x100 [ 173.569678][ C0] asm_exc_page_fault+0x26/0x30 [ 173.574552][ C0] RIP: 0033:0x7f6d290514f7 [ 173.578982][ C0] Code: Unable to access opcode bytes at 0x7f6d290514cd. [ 173.586094][ C0] RSP: 002b:00007f6d29ff3120 EFLAGS: 00010202 [ 173.592170][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f6d2919aeb9 [ 173.600153][ C0] RDX: 00007f6d29ff3140 RSI: 00007f6d29ff3270 RDI: 000000000000000b [ 173.608243][ C0] RBP: 00007f6d29208c1f R08: 0000000000000000 R09: 0000000000000000 [ 173.616396][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.624373][ C0] R13: 00007f6d29416128 R14: 00007f6d29416090 R15: 00007ffc35b765d8 [ 173.632382][ C0] [ 173.636020][ C0] Kernel Offset: disabled [ 173.640388][ C0] Rebooting in 86400 seconds..