last executing test programs: 14.358812264s ago: executing program 1 (id=55): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) close_range$auto(0x2, r0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) timerfd_create$auto(0x0, 0x2007d33) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0x3, 0x1, 0x8c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) mmap$auto(0x2000000001, 0x20009, 0x6, 0xeb1, 0x405, 0x2520) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 13.500268698s ago: executing program 1 (id=58): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) read$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000080)=""/100, 0x64) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c434ea071f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r2) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x17, 0x0, 0x56b) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x20000003, 0x3, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0x0, 0x292, 0x0, 0x400000000005b8, 0x9, 0x0, 0x200000000, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x8000000000000000, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x33580}}, 0x4064890) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 12.04635633s ago: executing program 1 (id=61): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x104020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x9}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000000)=0x9f6, 0x4) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) socket(0xa, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 11.768641391s ago: executing program 0 (id=62): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x40a0ae49, 0x0) 10.958191798s ago: executing program 0 (id=64): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8013) socket(0x2, 0xa, 0xa) socket(0xa, 0x3, 0x6) socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) epoll_wait$auto(0xffffffffffffffff, &(0x7f0000000080)={0x1ff, 0x3}, 0x3, 0xae0f) 8.288877021s ago: executing program 3 (id=69): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYBLOB="00211459a600fbdbdf250200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000df25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000380)={0x0, 0x44fe}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x41, 0xfffffffd) setsockopt$auto(r1, 0x0, 0x487, 0xfffffffffffffffe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40040) preadv$auto(0xffffffff, &(0x7f00000003c0)={&(0x7f0000000380), 0x1}, 0x4, 0x6, 0x42) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video53\x00', 0x141000, 0x0) read$auto(r2, &(0x7f0000002280)='/dev/vsock\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x200000000065f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0x1, 0x0, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0x40a, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x1, 0x4, 0x7, 0x7ff, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0xffffffffffffffbf, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x4000c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 7.680139306s ago: executing program 0 (id=70): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x100000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) socket(0xa, 0x3, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) epoll_wait$auto(r0, &(0x7f0000000080)={0x1ff, 0x3}, 0x3, 0xae0f) 7.209817971s ago: executing program 2 (id=71): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x4030ae7b, 0x0) 7.004129851s ago: executing program 3 (id=72): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x4030ae7b, 0x0) 6.85109684s ago: executing program 1 (id=73): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x4068aea3, 0x0) 6.850177725s ago: executing program 2 (id=74): r0 = socket(0x10, 0x2, 0xc) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = memfd_create$auto(&(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x6) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000100), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x200000, 0x0) epoll_ctl$auto(r0, 0xeb, r4, &(0x7f0000000040)={0x478, 0xfffffffffffffffc}) socket(0x10, 0x2, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) msync$auto(0x0, 0x5, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clock_adjtime$auto(0x0, 0x0) 5.577082719s ago: executing program 3 (id=75): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x70) mknodat$auto(r0, 0x0, 0xfff, 0xfffffff8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x17, 0x0, 0x3) getpid() unshare$auto(0x40000080) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x68481, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0xf) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x81, 0x0) write$auto(r3, 0x0, 0x4) 5.502660895s ago: executing program 1 (id=76): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b45, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xe1, 0x209b72, 0x7fffffff7f, 0x8000) r1 = socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffced, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40811) getrandom$auto(0x0, 0x6000000, 0x3) r3 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio10\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) read$auto(r4, 0x0, 0x1f3c) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) ioctl$auto(0x3, 0xc058565d, 0x38) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x80081, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x6, 0x9) r6 = fspick$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$auto_IEEE802154_DEL_IFACE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810) 4.885467035s ago: executing program 2 (id=77): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYBLOB="00211459a600fbdbdf250200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000df25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000380)={0x0, 0x44fe}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x41, 0xfffffffd) setsockopt$auto(r1, 0x0, 0x487, 0xfffffffffffffffe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40040) preadv$auto(0xffffffff, &(0x7f00000003c0)={&(0x7f0000000380), 0x1}, 0x4, 0x6, 0x42) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video53\x00', 0x141000, 0x0) read$auto(r2, &(0x7f0000002280)='/dev/vsock\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x200000000065f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0x1, 0x0, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0x40a, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x1, 0x4, 0x7, 0x7ff, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0xffffffffffffffbf, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x4000c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 4.337917606s ago: executing program 2 (id=78): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x400000000, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) socket(0xa, 0x3, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) epoll_wait$auto(r0, &(0x7f0000000080)={0x1ff, 0x3}, 0x3, 0xae0f) 4.276047635s ago: executing program 0 (id=79): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x4020ae46, 0x0) 3.823605142s ago: executing program 3 (id=80): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYBLOB="00211459a600fbdbdf250200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000df25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000380)={0x0, 0x44fe}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x41, 0xfffffffd) setsockopt$auto(r1, 0x0, 0x487, 0xfffffffffffffffe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40040) preadv$auto(0xffffffff, &(0x7f00000003c0)={&(0x7f0000000380), 0x1}, 0x4, 0x6, 0x42) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video53\x00', 0x141000, 0x0) read$auto(r2, &(0x7f0000002280)='/dev/vsock\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x200000000065f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0x1, 0x0, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0x40a, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x1, 0x4, 0x7, 0x7ff, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x4000000000, 0x8, 0x4, 0x6, 0xffffffffffffffbf, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x4000c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 3.485050617s ago: executing program 0 (id=81): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000280), 0x3cb401, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x7}, 0xffffffffffffeffa) madvise$auto(0x0, 0xffffffffffff0005, 0x19) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0xa, 0xa) socket(0xa, 0x3, 0x6) socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0157d2b331041b001930000000", @ANYRES16=r2, @ANYBLOB="100029bd7000fddbdf251600000006000a0000000000080021000600000005001a00f3000000050013000600000008000500b3e3000008000b00fcffffff0800270002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8800) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) epoll_wait$auto(0xffffffffffffffff, &(0x7f0000000080)={0x1ff, 0x3}, 0x3, 0xae0f) 3.193738538s ago: executing program 1 (id=82): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xd, 0x9, 0x8012, r0, 0x4) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x147602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) r1 = socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(r1, 0x0, 0xa) 2.483296955s ago: executing program 3 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xee69, 0x81, 0xae9d, &(0x7f0000000000)=0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x80585414, 0x0) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r1, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fbdbdf2521000000"], 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x0, 0xfffffffffffffffa, 0x100000001, 0x95cc) clone$auto(0x200021006, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x29) pwritev$auto(0x7, 0xffffffffffffffff, 0x6, 0x3, 0xb5) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r5, 0x4c82, 0x24) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf250400000043001100008742fe50c6ae168e439fdf2a7824e5c19bfd948b59b5cb5d1f1c5226f1765b67fe5b823201455e285a5af9b14f8ef62d6072bc5cad7e86f000"/85], 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 2.002818025s ago: executing program 2 (id=84): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x4c100, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0xf0ffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) socket(0xa, 0x3, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) epoll_wait$auto(r0, &(0x7f0000000080)={0x1ff, 0x3}, 0x3, 0xae0f) 724.865666ms ago: executing program 3 (id=85): madvise$auto(0x0, 0xfffffffffffefffd, 0x17) getsockopt$auto(0xffffffffffffffff, 0xc, 0x80000000, 0x0, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x700000000000000, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 154.697474ms ago: executing program 2 (id=86): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x81, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000180)="642eca93f56017ce018ec88b522842cc1a534c75fe0339eba01faad411e00b9207dd9b459f059cd0d7b5b30c516a2efe731e96ab996e9fc62c8d6c718814281cb526d023642625059a7b0861c46be4ad4a7e5220501e41fbcbbb8ebb02ebbee4ab2e9505aff04dfcf950171744e749c590192790e32f400d481fb8485ae265067c903a35", 0x100000001}, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) timer_create$auto(0x8, 0x0, 0x0) timer_getoverrun$auto(0x0) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) r2 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000), 0x103240, 0x0) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x9, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000000)='#)-\\\"[}\x00', 0xde8, 0xb, &(0x7f0000000240)={0x1, 0x5, 0x1, 0x5}) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x610, 0x6, 0x300000000000) write$auto(r2, 0x0, 0xb46) unshare$auto(0x40000080) 0s ago: executing program 0 (id=87): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYBLOB="00211459a600fbdbdf250200000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0700000000000000df25"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000380)={0x0, 0x44fe}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x41, 0xfffffffd) setsockopt$auto(r1, 0x0, 0x487, 0xfffffffffffffffe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40040) preadv$auto(0xffffffff, &(0x7f00000003c0)={&(0x7f0000000380), 0x1}, 0x4, 0x6, 0x42) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video53\x00', 0x141000, 0x0) read$auto(r2, &(0x7f0000002280)='/dev/vsock\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x4000c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 81.791251][ T5824] cgroup: Unknown subsys name 'net' [ 81.943578][ T5824] cgroup: Unknown subsys name 'cpuset' [ 81.951903][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.675259][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.644914][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.660446][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.668659][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.676750][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.689547][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.747882][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.756722][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.764843][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.765899][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.772332][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.784730][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.787901][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.800900][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.802495][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.808445][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.817528][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.835104][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.847412][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.856060][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.865263][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.889012][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.897574][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.905948][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.914307][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.224205][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.404245][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.415525][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.426348][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.433652][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.442319][ T5833] bridge_slave_0: entered allmulticast mode [ 86.449557][ T5833] bridge_slave_0: entered promiscuous mode [ 86.475574][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.483829][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.491363][ T5833] bridge_slave_1: entered allmulticast mode [ 86.498211][ T5833] bridge_slave_1: entered promiscuous mode [ 86.506120][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.606104][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.617684][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.737334][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.744957][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.752906][ T5837] bridge_slave_0: entered allmulticast mode [ 86.760142][ T5837] bridge_slave_0: entered promiscuous mode [ 86.770357][ T5833] team0: Port device team_slave_0 added [ 86.776463][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.783988][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.791373][ T5841] bridge_slave_0: entered allmulticast mode [ 86.798224][ T5841] bridge_slave_0: entered promiscuous mode [ 86.822975][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.830391][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.837568][ T5837] bridge_slave_1: entered allmulticast mode [ 86.845018][ T5837] bridge_slave_1: entered promiscuous mode [ 86.853385][ T5833] team0: Port device team_slave_1 added [ 86.863414][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.870715][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.877895][ T5841] bridge_slave_1: entered allmulticast mode [ 86.885011][ T5841] bridge_slave_1: entered promiscuous mode [ 86.900182][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.907393][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.914831][ T5846] bridge_slave_0: entered allmulticast mode [ 86.922807][ T5846] bridge_slave_0: entered promiscuous mode [ 86.971030][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.980949][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.988142][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.995739][ T5846] bridge_slave_1: entered allmulticast mode [ 87.003805][ T5846] bridge_slave_1: entered promiscuous mode [ 87.013086][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.036262][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.057011][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.067159][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.074517][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.100606][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.147978][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.155187][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.181217][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.203553][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.230589][ T5841] team0: Port device team_slave_0 added [ 87.239898][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.253157][ T5837] team0: Port device team_slave_0 added [ 87.262503][ T5837] team0: Port device team_slave_1 added [ 87.273031][ T5841] team0: Port device team_slave_1 added [ 87.359929][ T5833] hsr_slave_0: entered promiscuous mode [ 87.366623][ T5833] hsr_slave_1: entered promiscuous mode [ 87.375083][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.382812][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.409528][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.422741][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.429939][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.456270][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.470241][ T5846] team0: Port device team_slave_0 added [ 87.480945][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.487949][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.513920][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.527252][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.534291][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.560361][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.574068][ T5846] team0: Port device team_slave_1 added [ 87.614954][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.622143][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.648548][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.686246][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.697218][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.724040][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.781864][ T5837] hsr_slave_0: entered promiscuous mode [ 87.790140][ T5837] hsr_slave_1: entered promiscuous mode [ 87.797070][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.806193][ T5837] Cannot create hsr debugfs directory [ 87.815292][ T5841] hsr_slave_0: entered promiscuous mode [ 87.825610][ T5841] hsr_slave_1: entered promiscuous mode [ 87.832162][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.839897][ T5841] Cannot create hsr debugfs directory [ 87.893993][ T5846] hsr_slave_0: entered promiscuous mode [ 87.901624][ T5846] hsr_slave_1: entered promiscuous mode [ 87.908442][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.911110][ T5848] Bluetooth: hci1: command tx timeout [ 87.916031][ T5846] Cannot create hsr debugfs directory [ 87.921946][ T5850] Bluetooth: hci0: command tx timeout [ 87.933062][ T5836] Bluetooth: hci3: command tx timeout [ 87.988649][ T5836] Bluetooth: hci2: command tx timeout [ 88.233204][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.251563][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.276863][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.294763][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.329911][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.344157][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.355195][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.381273][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.454727][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.482911][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.493717][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.506486][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.587611][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.600988][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.614491][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.635317][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.652818][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.725895][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.744307][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.773205][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.780586][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.801888][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.821355][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.828551][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.869982][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.877164][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.889934][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.897127][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.936075][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.003170][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.027046][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.053984][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.061187][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.094914][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.115133][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.122351][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.166028][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.173328][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.207669][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.214889][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.297801][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.312203][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.504913][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.536818][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.635219][ T5837] veth0_vlan: entered promiscuous mode [ 89.650771][ T5833] veth0_vlan: entered promiscuous mode [ 89.676849][ T5837] veth1_vlan: entered promiscuous mode [ 89.702956][ T5833] veth1_vlan: entered promiscuous mode [ 89.780890][ T5837] veth0_macvtap: entered promiscuous mode [ 89.802023][ T5833] veth0_macvtap: entered promiscuous mode [ 89.813870][ T5833] veth1_macvtap: entered promiscuous mode [ 89.839717][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.848004][ T5837] veth1_macvtap: entered promiscuous mode [ 89.863588][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.874595][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.887849][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896905][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906306][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916110][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953267][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.970692][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.982174][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.988869][ T5836] Bluetooth: hci3: command tx timeout [ 89.997548][ T5836] Bluetooth: hci0: command tx timeout [ 90.000293][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.003443][ T5850] Bluetooth: hci1: command tx timeout [ 90.036684][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.047830][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.060413][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.071771][ T5836] Bluetooth: hci2: command tx timeout [ 90.096451][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107575][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.119369][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.128178][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.221651][ T5846] veth0_vlan: entered promiscuous mode [ 90.234661][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.243819][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.290152][ T5841] veth0_vlan: entered promiscuous mode [ 90.299794][ T5846] veth1_vlan: entered promiscuous mode [ 90.339197][ T5841] veth1_vlan: entered promiscuous mode [ 90.366156][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.385705][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.397764][ T5846] veth0_macvtap: entered promiscuous mode [ 90.443645][ T5846] veth1_macvtap: entered promiscuous mode [ 90.458805][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.466696][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.517197][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.542603][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.561042][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.576640][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.592491][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.622899][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.655495][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.655506][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.666789][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.679183][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.692163][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.706683][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.727893][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.742403][ T5841] veth0_macvtap: entered promiscuous mode [ 90.781105][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.794614][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805136][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.815519][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.837281][ T5841] veth1_macvtap: entered promiscuous mode [ 90.904891][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.936740][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.957759][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.973250][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.983390][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.995091][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.013328][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.044835][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.086591][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.107054][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.121874][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.133063][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.144244][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.170572][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.201695][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228505][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.248138][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.264348][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.331478][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.350358][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.415128][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.441056][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.538153][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.568365][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.646434][ T5905] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 91.819303][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.838418][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.878774][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.068938][ T5836] Bluetooth: hci0: command tx timeout [ 92.075131][ T5848] Bluetooth: hci1: command tx timeout [ 92.081098][ T5850] Bluetooth: hci3: command tx timeout [ 92.148482][ T5836] Bluetooth: hci2: command tx timeout [ 92.299416][ T5916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.539255][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.618145][ T5921] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 92.795608][ T5921] ======================================================= [ 92.795608][ T5921] WARNING: The mand mount option has been deprecated and [ 92.795608][ T5921] and is ignored by this kernel. Remove the mand [ 92.795608][ T5921] option from the mount to silence this warning. [ 92.795608][ T5921] ======================================================= [ 94.148611][ T5836] Bluetooth: hci0: command tx timeout [ 94.154224][ T5836] Bluetooth: hci1: command tx timeout [ 94.160050][ T5848] Bluetooth: hci3: command tx timeout [ 94.238572][ T5836] Bluetooth: hci2: command tx timeout [ 94.812905][ T5955] Zero length message leads to an empty skb [ 95.768079][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 96.356543][ T5990] zram: Added device: zram1 [ 96.378474][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 96.403607][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 97.361346][ T90] cfg80211: failed to load regulatory.db [ 99.069734][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 100.190608][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 100.750796][ T29] audit: type=1326 audit(1734546127.355:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.0.43" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44feb85d29 code=0x0 [ 100.772380][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.534956][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 105.131812][ T6110] Invalid ELF header magic: != ELF [ 105.591978][ T6104] ima: policy update failed [ 105.655328][ T29] audit: type=1802 audit(1734546132.235:3): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.53" res=0 errno=0 [ 106.945019][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 106.960291][ T6133] team_slave_0: entered allmulticast mode [ 108.400113][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 109.299753][ T6148] bond0: (slave bond_slave_1): Releasing backup interface [ 111.919965][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 114.957223][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 115.741582][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 116.400635][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 119.873975][ T6249] ------------[ cut here ]------------ [ 119.879970][ T6249] WARNING: CPU: 1 PID: 6249 at mm/page_alloc.c:4727 __alloc_pages_noprof+0xeff/0x25b0 [ 119.889788][ T6249] Modules linked in: [ 119.893775][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.86 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 119.904897][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.915702][ T6249] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 119.922041][ T6249] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 72 64 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 119.941850][ T6249] RSP: 0018:ffffc90004aef898 EFLAGS: 00010246 [ 119.948009][ T6249] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.956361][ T6249] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 119.964490][ T6249] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 119.972601][ T6249] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000013 [ 119.980748][ T6249] R13: 0000000000040cc0 R14: 1ffff9200095df27 R15: 00000000ffffffff [ 119.989002][ T6249] FS: 00007f05a07e96c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 119.998094][ T6249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.004573][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 120.005607][ T6249] CR2: 0000001b30918ff8 CR3: 000000002423e000 CR4: 00000000003526f0 [ 120.022792][ T6249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.031178][ T6249] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.039476][ T6249] Call Trace: [ 120.042814][ T6249] [ 120.045807][ T6249] ? __warn+0xea/0x3c0 [ 120.050159][ T6249] ? __alloc_pages_noprof+0xeff/0x25b0 [ 120.055725][ T6249] ? report_bug+0x3c0/0x580 [ 120.060413][ T6249] ? handle_bug+0x54/0xa0 [ 120.064834][ T6249] ? exc_invalid_op+0x17/0x50 [ 120.069750][ T6249] ? asm_exc_invalid_op+0x1a/0x20 [ 120.074892][ T6249] ? __alloc_pages_noprof+0xeff/0x25b0 [ 120.080557][ T6249] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.085855][ T6249] ? hlock_class+0x4e/0x130 [ 120.090631][ T6249] ? mark_lock+0xb5/0xc60 [ 120.095062][ T6249] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.100945][ T6249] ? find_held_lock+0x2d/0x110 [ 120.106221][ T6249] ? __pfx_lock_release+0x10/0x10 [ 120.111794][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.117217][ T6249] ? hlock_class+0x4e/0x130 [ 120.121951][ T6249] ? __lock_acquire+0x15a9/0x3c40 [ 120.127078][ T6249] ___kmalloc_large_node+0x84/0x1b0 [ 120.132408][ T6249] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.138129][ T6249] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 120.144925][ T6249] ? nsim_dev_health_break_write+0x9a/0x1e0 [ 120.151217][ T6249] memdup_user_nul+0x2b/0x110 [ 120.156001][ T6249] nsim_dev_health_break_write+0x9a/0x1e0 [ 120.161978][ T6249] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 120.168545][ T6249] ? rcu_is_watching+0x12/0xc0 [ 120.173391][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.178812][ T6249] full_proxy_write+0xfb/0x1b0 [ 120.183675][ T6249] ? __pfx_full_proxy_write+0x10/0x10 [ 120.189170][ T6249] vfs_writev+0x6da/0xdd0 [ 120.193574][ T6249] ? fdget_pos+0x267/0x390 [ 120.198098][ T6249] ? __pfx_vfs_writev+0x10/0x10 [ 120.203133][ T6249] ? __mutex_lock+0x1cc/0xa60 [ 120.208701][ T6249] ? find_held_lock+0x2d/0x110 [ 120.213581][ T6249] ? __pfx___mutex_lock+0x10/0x10 [ 120.218770][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.224081][ T6249] ? __fget_files+0x206/0x3a0 [ 120.229074][ T6249] ? do_writev+0x133/0x340 [ 120.233562][ T6249] do_writev+0x133/0x340 [ 120.237896][ T6249] ? __pfx_do_writev+0x10/0x10 [ 120.242848][ T6249] do_syscall_64+0xcd/0x250 [ 120.247440][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.253545][ T6249] RIP: 0033:0x7f059f985d29 [ 120.258037][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.278041][ T6249] RSP: 002b:00007f05a07e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.286660][ T6249] RAX: ffffffffffffffda RBX: 00007f059fb75fa0 RCX: 00007f059f985d29 [ 120.294761][ T6249] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 120.302935][ T6249] RBP: 00007f059fa01a20 R08: 0000000000000000 R09: 0000000000000000 [ 120.311476][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.320177][ T6249] R13: 0000000000000000 R14: 00007f059fb75fa0 R15: 00007ffdc91a34e8 [ 120.328427][ T6249] [ 120.331503][ T6249] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.338835][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.86 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 120.349373][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.359452][ T6249] Call Trace: [ 120.362767][ T6249] [ 120.365725][ T6249] dump_stack_lvl+0x3d/0x1f0 [ 120.370357][ T6249] panic+0x71d/0x800 [ 120.374294][ T6249] ? __pfx_panic+0x10/0x10 [ 120.378763][ T6249] ? show_trace_log_lvl+0x29d/0x3d0 [ 120.384186][ T6249] ? __alloc_pages_noprof+0xeff/0x25b0 [ 120.389700][ T6249] check_panic_on_warn+0xab/0xb0 [ 120.394748][ T6249] __warn+0xf6/0x3c0 [ 120.398705][ T6249] ? __alloc_pages_noprof+0xeff/0x25b0 [ 120.404229][ T6249] report_bug+0x3c0/0x580 [ 120.408611][ T6249] handle_bug+0x54/0xa0 [ 120.412814][ T6249] exc_invalid_op+0x17/0x50 [ 120.417365][ T6249] asm_exc_invalid_op+0x1a/0x20 [ 120.422273][ T6249] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 120.428653][ T6249] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 0e b3 fe ff e9 69 f9 ff ff c6 05 72 64 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 9f a3 0c 00 8b 14 24 e9 [ 120.448312][ T6249] RSP: 0018:ffffc90004aef898 EFLAGS: 00010246 [ 120.454442][ T6249] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.462516][ T6249] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 120.470513][ T6249] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 120.478513][ T6249] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000013 [ 120.486542][ T6249] R13: 0000000000040cc0 R14: 1ffff9200095df27 R15: 00000000ffffffff [ 120.494587][ T6249] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.499851][ T6249] ? hlock_class+0x4e/0x130 [ 120.504407][ T6249] ? mark_lock+0xb5/0xc60 [ 120.508804][ T6249] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.514575][ T6249] ? find_held_lock+0x2d/0x110 [ 120.519387][ T6249] ? __pfx_lock_release+0x10/0x10 [ 120.524528][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.529880][ T6249] ? hlock_class+0x4e/0x130 [ 120.534425][ T6249] ? __lock_acquire+0x15a9/0x3c40 [ 120.539598][ T6249] ___kmalloc_large_node+0x84/0x1b0 [ 120.544919][ T6249] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.551043][ T6249] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 120.557710][ T6249] ? nsim_dev_health_break_write+0x9a/0x1e0 [ 120.563652][ T6249] memdup_user_nul+0x2b/0x110 [ 120.568374][ T6249] nsim_dev_health_break_write+0x9a/0x1e0 [ 120.574168][ T6249] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 120.580536][ T6249] ? rcu_is_watching+0x12/0xc0 [ 120.585346][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.590679][ T6249] full_proxy_write+0xfb/0x1b0 [ 120.595501][ T6249] ? __pfx_full_proxy_write+0x10/0x10 [ 120.600913][ T6249] vfs_writev+0x6da/0xdd0 [ 120.605303][ T6249] ? fdget_pos+0x267/0x390 [ 120.609780][ T6249] ? __pfx_vfs_writev+0x10/0x10 [ 120.614676][ T6249] ? __mutex_lock+0x1cc/0xa60 [ 120.619402][ T6249] ? find_held_lock+0x2d/0x110 [ 120.624216][ T6249] ? __pfx___mutex_lock+0x10/0x10 [ 120.629380][ T6249] ? trace_lock_acquire+0x14e/0x1f0 [ 120.634727][ T6249] ? __fget_files+0x206/0x3a0 [ 120.639447][ T6249] ? do_writev+0x133/0x340 [ 120.643893][ T6249] do_writev+0x133/0x340 [ 120.648166][ T6249] ? __pfx_do_writev+0x10/0x10 [ 120.652971][ T6249] do_syscall_64+0xcd/0x250 [ 120.657611][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.663545][ T6249] RIP: 0033:0x7f059f985d29 [ 120.668004][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.687729][ T6249] RSP: 002b:00007f05a07e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.696272][ T6249] RAX: ffffffffffffffda RBX: 00007f059fb75fa0 RCX: 00007f059f985d29 [ 120.704361][ T6249] RDX: 0000000000000002 RSI: 0000000020000100 RDI: 0000000000000004 [ 120.712357][ T6249] RBP: 00007f059fa01a20 R08: 0000000000000000 R09: 0000000000000000 [ 120.720359][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.728446][ T6249] R13: 0000000000000000 R14: 00007f059fb75fa0 R15: 00007ffdc91a34e8 [ 120.736468][ T6249] [ 120.739850][ T6249] Kernel Offset: disabled [ 120.744257][ T6249] Rebooting in 86400 seconds..