last executing test programs: 9.13451637s ago: executing program 1 (id=60): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x15cb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc10c5541, r2) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@generic={0x6, "73fc13e3463211a3388555c65cb3"}, 0x406a) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r6, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xebe, r4, 0x8001) 9.103623065s ago: executing program 2 (id=61): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x6, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r4 = socket(0x10, 0x2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/dentry-state\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) 7.957259682s ago: executing program 1 (id=70): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x6, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r4 = socket(0x10, 0x2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/dentry-state\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) 7.226009979s ago: executing program 2 (id=63): unshare$auto(0x40000080) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port4/over_current_count\x00', 0x50080, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)="018fac297e857e25b7371f9d3e9a350e7ac811c087f2794823b838385544315f18c78aee068e8971ca6feb7f5f21444f160ffbc6db39677d21dec99144eadfc787b697614aa78b2a09a39bcb0208ff082e47645c25907bbc783bdd342c0650e39eca7a57213fceadff804bb496b0e41c2e02a57a5ef51c54f23bf5287e1db445733328b476535b7090cb672953e1120510e1a584e9fcfc1c4808ac9cede07dd7e98c09a3995a9da60b347a878e0f225d96e77240f4a7fa722cbb4c8227aff94545ceeb882986e65511321297dbb4499c00000000000019c766a6278ff3c4630cc2a2ec836612116b9e025e852d42e7584d4a0f60125302c5c74ea60ed92538424e4622d1250cc2ce405778e9957a7cb1b94ff1f3e3817ae961cc6df39e5fd5f0f3728179ba600fc6fecf9f8d2a0b1a8f11eec6bdd4b76bc2a9016c4aa19e0050504a34252502d6d09ceadd2153c18f3b4641fec28a498a5e89a03a111cd6b127481c7de2e3cdd0b24dfdae8716990506ab3f120cdbb47350a2079a81f79cd1765cdd52bbeb74f1d2412174a9760c9781cec2b69b458f73ccae98b745dfaa4264f3701df6f9f67efb7dca62f60aab39b339eeae128beb47e77e61cbb0f19a30ca4c3855a143a6be769423dd", 0x8) read$auto(r5, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r6, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r7, 0x545c, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r3, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0) r8 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r8, 0x40044160, 0x0) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bdf000fcdbdf251b0000001800"/37], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 7.225472518s ago: executing program 3 (id=64): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x129200, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r0 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) r3 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000001e80)=@test={0xffffffffffffffff, 0x6, 0x80000001, 0xe, 0x137800, 0x0, 0x7, 0xb, 0x3, 0xfffffff3, 0x3, 0x2a0d, 0x9, 0x3, 0x1}, 0xc97) ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f00000021c0)={"42982fa5582eda9a20cd1eb6e5c0e57de87197b51df63b3f7f5b80401ef3e0af", 0x4, 0x7, 0x800, 0x7fffffffffffffff, 0x9, 0x0}) syz_clone3(&(0x7f0000002280)={0x0, &(0x7f0000001f80)=0xffffffffffffffff, &(0x7f0000001fc0), &(0x7f0000002000)=0x0, {0x32}, &(0x7f0000002040)=""/152, 0x98, &(0x7f0000002100)=""/166, &(0x7f0000002240)=[0x0, r5, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) syz_clone3(&(0x7f0000002640)={0x4020000, &(0x7f0000002440), &(0x7f0000002480), &(0x7f00000024c0), {0x3e}, &(0x7f0000002500)=""/122, 0x7a, &(0x7f0000002580)=""/104, &(0x7f0000002600)=[r7], 0x1}, 0x58) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000002700), 0xffffffffffffffff) waitid$auto(0x8, r3, &(0x7f0000002740)={@_si_pad}, 0xfff, &(0x7f00000027c0)={{0x0, 0x4}, {0x6, 0x1}, 0x0, 0x2, 0xae, 0x8, 0x7, 0xfffffffffffffffd, 0x8, 0x3, 0x8001, 0x7, 0xf, 0x2, 0x1000, 0x51}) waitid$auto_P_PIDFD(0x3, r6, &(0x7f0000002880)={@siginfo_0_0={0x3, 0x7, 0x6, @_sigpoll={0x7}}}, 0x1, &(0x7f0000002900)={{0x8bfe, 0x9906}, {0x3, 0x93}, 0x0, 0x4, 0x101, 0x7, 0x6, 0x6, 0x4, 0x2, 0xfffffffffffffffc, 0x6, 0x80000001, 0x7f, 0x8166, 0xfffffffffffffffd}) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000005700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000056c0)={0x0, 0x2be0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4040000) setfsuid$auto(0xee01) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x8000000) 6.780392908s ago: executing program 1 (id=65): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b800400020004000300"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x100000000) 5.648949256s ago: executing program 3 (id=67): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x6, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r4 = socket(0x10, 0x2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/dentry-state\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) 5.561198973s ago: executing program 0 (id=68): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x610000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast1}, 0x54) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x1000001, 0x0, 0x9}]}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x5, &(0x7f0000000000), 0x2) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008003) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x9000643c, 0xc35) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r4, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x204, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xe6f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.386410157s ago: executing program 0 (id=69): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0xb) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x401, 0x38, 0x0, &(0x7f0000000200)=0x7) r1 = fcntl$auto(r0, 0x5, 0x6) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x4, 0x20086, 0x0, &(0x7f0000000000)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SAR_SPEC={0x38, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x34, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r9 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r9, 0xaf01, 0x5) ioctl$auto(r9, 0x4008af03, r6) 4.386176098s ago: executing program 1 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_getoverrun$auto(0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x800, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) close_range$auto(0x0, r0, 0x2) socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x10002, &(0x7f0000000140)=@batch={0xc0000000, 0x7, 0x10000, 0x24, 0xa000000, r1, 0x0, 0xdc23}, 0x800) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) io_cancel$auto(0x6, 0x0, 0x0) socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x106) bind$auto(0x3, 0x0, 0x69) connect$auto(0xffffffffffffffff, 0x0, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "1200a9800300"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = memfd_secret$auto(0x0) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0xffffffffffffffff, 0xffffffff) mlock$auto(0x2ea, 0xfff) 4.380934857s ago: executing program 2 (id=72): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x6, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r4 = socket(0x10, 0x2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/dentry-state\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) 4.380388243s ago: executing program 3 (id=73): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b800400020004000300"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x100000000) 3.371883908s ago: executing program 2 (id=74): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x6, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r4 = socket(0x10, 0x2, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/dentry-state\x00', 0x0, 0x0) sendfile$auto(r4, r5, 0x0, 0x3) 3.255217516s ago: executing program 3 (id=75): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket(0x2, 0x80002, 0x0) setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3) write$auto(0x3, 0x0, 0x3f00) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x128009, 0x9, 0x100000eb1, 0x401, 0x8080) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) socketpair$auto(0x5, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0x4008ae9c, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x40}, 0x7) sendfile$auto(r0, r0, 0x0, 0x7ffff000) r7 = pidfd_getfd$auto(r1, r6, 0x1) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r3) r9 = getpgid(0x0) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000ea8d657fd1c72ba6e005eec4271c3fd1d8a1e3f2e140bdd355aa32b85183b8d811451b492a4ec3254ff6ccd0a4c3d47268eca067aaafe113ef83bd163e2c03dc552ae3a36183cfbea836be98d79eff751ab3ceb7", @ANYRES16=r8, @ANYBLOB="00042abd7000fcdbdf250200000008000200", @ANYRES32=r9, @ANYBLOB="1c0001002f6465762f67616467657466732f64756d6d795f75646300080005000700000008000500070000000800070000000080"], 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0x5) 2.776292905s ago: executing program 0 (id=76): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x15cb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc10c5541, r2) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0x6, "73fc13e3463211a3388555c65cb3"}, 0x406a) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) getsockopt$auto_SO_DEBUG(r4, 0x5, 0x1, &(0x7f0000000180)='}}:(-\x00', &(0x7f00000001c0)=0xd) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r7, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xebe, r4, 0x8001) 2.442528151s ago: executing program 0 (id=77): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x129200, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r0 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) r3 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000001e80)=@test={0xffffffffffffffff, 0x6, 0x80000001, 0xe, 0x137800, 0x0, 0x7, 0xb, 0x3, 0xfffffff3, 0x3, 0x2a0d, 0x9, 0x3, 0x1}, 0xc97) ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f00000021c0)={"42982fa5582eda9a20cd1eb6e5c0e57de87197b51df63b3f7f5b80401ef3e0af", 0x4, 0x7, 0x800, 0x7fffffffffffffff, 0x9, 0x0}) syz_clone3(&(0x7f0000002280)={0x0, &(0x7f0000001f80)=0xffffffffffffffff, &(0x7f0000001fc0), &(0x7f0000002000)=0x0, {0x32}, &(0x7f0000002040)=""/152, 0x98, &(0x7f0000002100)=""/166, &(0x7f0000002240)=[0x0, r5, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) syz_clone3(&(0x7f0000002640)={0x4020000, &(0x7f0000002440), &(0x7f0000002480), &(0x7f00000024c0), {0x3e}, &(0x7f0000002500)=""/122, 0x7a, &(0x7f0000002580)=""/104, &(0x7f0000002600)=[r7], 0x1}, 0x58) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000002700), 0xffffffffffffffff) waitid$auto(0x8, r3, &(0x7f0000002740)={@_si_pad}, 0xfff, &(0x7f00000027c0)={{0x0, 0x4}, {0x6, 0x1}, 0x0, 0x2, 0xae, 0x8, 0x7, 0xfffffffffffffffd, 0x8, 0x3, 0x8001, 0x7, 0xf, 0x2, 0x1000, 0x51}) waitid$auto_P_PIDFD(0x3, r6, &(0x7f0000002880)={@siginfo_0_0={0x3, 0x7, 0x6, @_sigpoll={0x7}}}, 0x1, &(0x7f0000002900)={{0x8bfe, 0x9906}, {0x3, 0x93}, 0x0, 0x4, 0x101, 0x7, 0x6, 0x6, 0x4, 0x2, 0xfffffffffffffffc, 0x6, 0x80000001, 0x7f, 0x8166, 0xfffffffffffffffd}) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000005700)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000056c0)={0x0, 0x2be0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4040000) setfsuid$auto(0xee01) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x8000000) 2.295246918s ago: executing program 1 (id=78): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/48, 0x30) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x8, 0x4000000000db, 0x12, 0x400, 0x8001) setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, 0x0, 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0xfffffffffffffffd, 0xffffffffffff36b8, 0x7, 0x17, r2, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x101042, 0x0) preadv$auto(r3, &(0x7f00000000c0)={0x0, 0x2}, 0x6, 0xe, 0x8) r4 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) r5 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f00000000c0), 0x7fcb, 0x0, 0x10015, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x9, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0) pread64$auto(r6, 0x0, 0xfffffffd, 0x1040cb9258) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) 2.169667951s ago: executing program 3 (id=79): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x15, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) socket(0xa, 0x5, 0x0) 1.359544648s ago: executing program 2 (id=80): mmap$auto(0x0, 0x400008, 0x1e, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/7, 0x7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0x200000df, 0x12, 0x2, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x7fa) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) unshare$auto(0x21) shutdown$auto(r1, 0x5) prctl$auto(0x3e, 0xfefffffffffffffd, 0x0, 0x1, 0x1000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/fuse\x00', 0x8080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) 1.234677128s ago: executing program 0 (id=81): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) gettid() set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xf, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0xffff}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x6) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400c0) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci4/msft_opcode\x00', 0x2, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x1001, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r4) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000017c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESDEC=r3, @ANYRESDEC=r2], 0x13d0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000440)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7fe}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) 989.35039ms ago: executing program 1 (id=82): close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x5, &(0x7f0000000000)={{0xa, 0x22ee}, {0x6, 0x1}}, &(0x7f0000000080)={{0x482871c6, 0x7}, {0x0, 0x80}}) socket(0x2, 0x3, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x14d37c, 0x33b) socket(0x2, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffffb, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0xf13f, 0x3, 0x0, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) 234.985333ms ago: executing program 2 (id=83): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/rate\x00', 0x7810c3, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm$auto(0x4, 0x2, 0x7c) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x7) socket(0x2, 0x2, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x8) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r3, 0x4008af24, r2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000004", @ANYRES16=r4, @ANYBLOB="0100273d7000fcdbdf2524000000180001804978907514000200776c616e3000000000000000dfc9fb57fc4ef886e4ab593bc3283ab4baac4fcc67a00e6d969e0e3c2188350ff561f0872c21d5bc4dcd899d3aa4f398088e0b69734bd7793b430d0c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x440d8) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000380), 0x149200, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x3, 0x6, 0x6) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000005) 234.74283ms ago: executing program 3 (id=84): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0x9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xb9442, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0x2, 0x13, 0x1) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) mmap$auto(0x100000, 0xffffffffffffffff, 0x4000000000df, 0x19, r2, 0x5) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 0s ago: executing program 0 (id=85): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x7fffe001) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x80000, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x10000000000000d, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000081, 0x8, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x11c, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143262, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000005c0)=ANY=[], 0xfffffd4b}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002dbd7000fcdbdf257e0000000088a5cd5c95f378433574ede152d2d648077b925af91b9870c2840d680b779cf778bae59f330956285eeda8b5ebb445c178c810fb4b76eb172a16ee83c71a15873ce59b5248da9c06b8aaceb2e05fed6d1bc32338652010162b894df565abe850fbcfb8f030e77d32d9f2bb90c89762add386352e2379f957f4caf106cd272527caba4a62f73b22b60b0111717d721c16"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socketpair$auto(0x1, 0xffff812b, 0xfff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec14/power/runtime_suspended_time\x00', 0x220080, 0x0) r8 = io_uring_setup$auto(0x5, 0x0) ioctl$auto_FS_IOC_ADD_ENCRYPTION_KEY2(r8, 0xc0506617, &(0x7f00000001c0)={{0x1, 0x0, @descriptor="ef468928639b7581"}, 0x9, 0x1}) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)=""/55, 0x37) write$auto_console_fops_tty_io(r7, &(0x7f0000000340)="c80c1b5d399b588143e12632e16841dd73450e32ce65e99407334a998d5a7a5d14d75346a0f32c6924197ec30526fcb61c0b29024ebecfb9b357e5cd53c73d8692e5ae6aff889cf259f55be3697ee2428c633014880178d7f4fbeb2aacfb3a122387d3b9f3711d53b58246c61bfa7121f130194ec2808698195c2cdf9f6979df65efbb516b537ef1a005f87e6396a801ba8ddded61811d2d21c60d4c0d0074182bb38777fd", 0xa5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 80.657468][ T5815] cgroup: Unknown subsys name 'net' [ 80.808479][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.817624][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.293989][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.391339][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.396165][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.399254][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.416896][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.424546][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.424676][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.437665][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.446311][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.448504][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.460801][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.462380][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.469120][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.475850][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.483201][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.489472][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.499167][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.517968][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.525766][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.533211][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.541157][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.073621][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.113789][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.259314][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.284030][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 85.368106][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.375400][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.382801][ T5824] bridge_slave_0: entered allmulticast mode [ 85.390129][ T5824] bridge_slave_0: entered promiscuous mode [ 85.436575][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.443677][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.450961][ T5824] bridge_slave_1: entered allmulticast mode [ 85.459400][ T5824] bridge_slave_1: entered promiscuous mode [ 85.479451][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.486687][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.493806][ T5827] bridge_slave_0: entered allmulticast mode [ 85.501080][ T5827] bridge_slave_0: entered promiscuous mode [ 85.530217][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.537465][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.544598][ T5827] bridge_slave_1: entered allmulticast mode [ 85.552055][ T5827] bridge_slave_1: entered promiscuous mode [ 85.571388][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.610784][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.672688][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.692564][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.700210][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.707692][ T5825] bridge_slave_0: entered allmulticast mode [ 85.714643][ T5825] bridge_slave_0: entered promiscuous mode [ 85.735237][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.744456][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.751802][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.759094][ T5829] bridge_slave_0: entered allmulticast mode [ 85.766290][ T5829] bridge_slave_0: entered promiscuous mode [ 85.774050][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.781758][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.789062][ T5825] bridge_slave_1: entered allmulticast mode [ 85.797079][ T5825] bridge_slave_1: entered promiscuous mode [ 85.818946][ T5824] team0: Port device team_slave_0 added [ 85.837315][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.844459][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.851780][ T5829] bridge_slave_1: entered allmulticast mode [ 85.859098][ T5829] bridge_slave_1: entered promiscuous mode [ 85.878620][ T5824] team0: Port device team_slave_1 added [ 85.887647][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.932153][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.944437][ T5827] team0: Port device team_slave_0 added [ 85.984853][ T5827] team0: Port device team_slave_1 added [ 85.993682][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.004111][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.011221][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.037688][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.074726][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.104486][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.111507][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.137423][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.150069][ T5825] team0: Port device team_slave_0 added [ 86.188121][ T5825] team0: Port device team_slave_1 added [ 86.195473][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.202421][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.228343][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.240961][ T5829] team0: Port device team_slave_0 added [ 86.260377][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.267652][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.293810][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.306917][ T5829] team0: Port device team_slave_1 added [ 86.371520][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.378957][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.405289][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.428044][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.435060][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.461156][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.473640][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.480717][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.506923][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.518838][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.525862][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.551940][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.568640][ T5824] hsr_slave_0: entered promiscuous mode [ 86.575786][ T5824] hsr_slave_1: entered promiscuous mode [ 86.576135][ T5839] Bluetooth: hci3: command tx timeout [ 86.581413][ T5841] Bluetooth: hci0: command tx timeout [ 86.587311][ T5833] Bluetooth: hci2: command tx timeout [ 86.592390][ T53] Bluetooth: hci1: command tx timeout [ 86.678442][ T5827] hsr_slave_0: entered promiscuous mode [ 86.684736][ T5827] hsr_slave_1: entered promiscuous mode [ 86.691137][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 86.697261][ T5827] Cannot create hsr debugfs directory [ 86.828697][ T5825] hsr_slave_0: entered promiscuous mode [ 86.836990][ T5825] hsr_slave_1: entered promiscuous mode [ 86.843548][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.849533][ T5825] Cannot create hsr debugfs directory [ 86.912508][ T5829] hsr_slave_0: entered promiscuous mode [ 86.920749][ T5829] hsr_slave_1: entered promiscuous mode [ 86.927580][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.933317][ T5829] Cannot create hsr debugfs directory [ 87.328315][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.342454][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.352992][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.371045][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.449535][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.463051][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.488205][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.499039][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.586494][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.606362][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.618488][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.629017][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.730302][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.742582][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.755250][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.767260][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.791311][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.846976][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.870894][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.878250][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.907661][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.914901][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.954639][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.043426][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.079672][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.088553][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.095838][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.118538][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.125731][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.156760][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.176496][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.214254][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221437][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.234387][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.241520][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.291854][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.315783][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.371344][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.378554][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.420096][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.427337][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.581738][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.661226][ T5841] Bluetooth: hci0: command tx timeout [ 88.661252][ T5839] Bluetooth: hci3: command tx timeout [ 88.668286][ T53] Bluetooth: hci1: command tx timeout [ 88.672880][ T5833] Bluetooth: hci2: command tx timeout [ 88.693496][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.773035][ T5825] veth0_vlan: entered promiscuous mode [ 88.814653][ T5825] veth1_vlan: entered promiscuous mode [ 88.868032][ T5824] veth0_vlan: entered promiscuous mode [ 88.909934][ T5824] veth1_vlan: entered promiscuous mode [ 88.938700][ T5825] veth0_macvtap: entered promiscuous mode [ 88.952193][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.972136][ T5825] veth1_macvtap: entered promiscuous mode [ 89.033033][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.053103][ T5824] veth0_macvtap: entered promiscuous mode [ 89.070451][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.098608][ T5824] veth1_macvtap: entered promiscuous mode [ 89.112492][ T5827] veth0_vlan: entered promiscuous mode [ 89.122379][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.157403][ T5827] veth1_vlan: entered promiscuous mode [ 89.164787][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.176551][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198778][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.207780][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218822][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.234826][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.272815][ T5829] veth0_vlan: entered promiscuous mode [ 89.280576][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.290139][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.314404][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.323567][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.361082][ T5829] veth1_vlan: entered promiscuous mode [ 89.418133][ T5827] veth0_macvtap: entered promiscuous mode [ 89.439700][ T5827] veth1_macvtap: entered promiscuous mode [ 89.479612][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.489314][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.499285][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.530057][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.540101][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.551301][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560350][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.577727][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586962][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.597805][ T5829] veth0_macvtap: entered promiscuous mode [ 89.624368][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.632758][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.647429][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684865][ T5829] veth1_macvtap: entered promiscuous mode [ 89.724288][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.743226][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.762680][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.807824][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.817900][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.855468][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.863314][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.898939][ T3572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.927315][ T3572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999466][ T3572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011367][ T3572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.023229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.031791][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.171675][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.239392][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.339520][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.353688][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.742683][ T5833] Bluetooth: hci1: command tx timeout [ 90.749439][ T5839] Bluetooth: hci0: command tx timeout [ 90.749461][ T53] Bluetooth: hci2: command tx timeout [ 90.754845][ T5839] Bluetooth: hci3: command tx timeout [ 90.801828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.835550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.843939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.856394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.904357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.115957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.220712][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.355553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.376492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.485564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.496759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.866657][ T24] cfg80211: failed to load regulatory.db [ 92.267109][ T5958] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.293210][ T5947] netlink: zone id is out of range [ 92.767707][ T5960] Zero length message leads to an empty skb [ 92.816974][ T5839] Bluetooth: hci3: command tx timeout [ 92.821750][ T5833] Bluetooth: hci1: command tx timeout [ 92.822495][ T5839] Bluetooth: hci2: command tx timeout [ 92.827810][ T5833] Bluetooth: hci0: command tx timeout [ 94.432344][ T5969] syz.2.9 (5969) used greatest stack depth: 19720 bytes left [ 98.040192][ T6047] Invalid ELF header magic: != ELF [ 99.698100][ T6065] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 100.497170][ T6078] process 'syz.3.30' launched '/dev/fd/4' with NULL argv: empty string added [ 102.322494][ T6112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.346039][ T6112] netlink: zone id is out of range [ 102.893140][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.418316][ T6137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.480988][ T6140] netlink: zone id is out of range [ 112.066368][ T6252] netlink: zone id is out of range [ 112.081361][ T6244] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 114.268885][ T6285] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.285072][ T6285] netlink: zone id is out of range [ 116.019837][ T6323] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 117.285642][ T6337] zswap: compressor not available [ 118.027949][ T6359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.327357][ T6356] ================================================================== [ 118.327383][ T6356] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 118.327427][ T6356] Write of size 8 at addr ffffc90003899000 by task syz.3.84/6356 [ 118.327446][ T6356] [ 118.327466][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 118.327495][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.327508][ T6356] Call Trace: [ 118.327516][ T6356] [ 118.327529][ T6356] dump_stack_lvl+0x116/0x1f0 [ 118.327558][ T6356] print_report+0xcd/0x630 [ 118.327587][ T6356] ? __virt_addr_valid+0x81/0x610 [ 118.327623][ T6356] ? sys_imageblit+0x1a6f/0x1e60 [ 118.327651][ T6356] kasan_report+0xe0/0x110 [ 118.327694][ T6356] ? sys_imageblit+0x1a6f/0x1e60 [ 118.327725][ T6356] sys_imageblit+0x1a6f/0x1e60 [ 118.327759][ T6356] ? __pfx_sys_imageblit+0x10/0x10 [ 118.327804][ T6356] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 118.327836][ T6356] soft_cursor+0x524/0xa10 [ 118.327879][ T6356] bit_cursor+0xe8c/0x17e0 [ 118.327926][ T6356] ? __pfx_bit_cursor+0x10/0x10 [ 118.328007][ T6356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.328050][ T6356] ? get_color+0x1da/0x450 [ 118.328082][ T6356] ? __pfx_bit_cursor+0x10/0x10 [ 118.328115][ T6356] fbcon_cursor+0x40c/0x5a0 [ 118.328146][ T6356] ? do_blank_screen+0x591/0x5a0 [ 118.328170][ T6356] set_cursor+0x1db/0x250 [ 118.328190][ T6356] con_write+0x89/0xb0 [ 118.328217][ T6356] do_output_char+0x5d9/0x840 [ 118.328245][ T6356] n_tty_write+0x4fe/0x11e0 [ 118.328281][ T6356] ? __pfx_n_tty_write+0x10/0x10 [ 118.328314][ T6356] ? trace_kmalloc+0x2b/0xd0 [ 118.328343][ T6356] ? __pfx_woken_wake_function+0x10/0x10 [ 118.328383][ T6356] ? kfree+0x252/0x6d0 [ 118.328405][ T6356] ? __pfx_n_tty_write+0x10/0x10 [ 118.328440][ T6356] file_tty_write.constprop.0+0x503/0x9b0 [ 118.328474][ T6356] redirected_tty_write+0xd4/0x150 [ 118.328504][ T6356] vfs_write+0x7d3/0x11d0 [ 118.328531][ T6356] ? __pfx_redirected_tty_write+0x10/0x10 [ 118.328562][ T6356] ? __pfx_vfs_write+0x10/0x10 [ 118.328587][ T6356] ? find_held_lock+0x2b/0x80 [ 118.328622][ T6356] ksys_write+0x12a/0x250 [ 118.328646][ T6356] ? __pfx_ksys_write+0x10/0x10 [ 118.328675][ T6356] do_syscall_64+0xcd/0xfa0 [ 118.328705][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.328729][ T6356] RIP: 0033:0x7fdbdf78efc9 [ 118.328757][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.328779][ T6356] RSP: 002b:00007fdbe0653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.328802][ T6356] RAX: ffffffffffffffda RBX: 00007fdbdf9e6090 RCX: 00007fdbdf78efc9 [ 118.328817][ T6356] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 118.328832][ T6356] RBP: 00007fdbdf811f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.328847][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.328862][ T6356] R13: 00007fdbdf9e6128 R14: 00007fdbdf9e6090 R15: 00007ffda80dd508 [ 118.328881][ T6356] [ 118.328886][ T6356] [ 118.328891][ T6356] The buggy address belongs to a vmalloc virtual mapping [ 118.328901][ T6356] Memory state around the buggy address: [ 118.328909][ T6356] ffffc90003898f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 118.328919][ T6356] ffffc90003898f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 118.328963][ T6356] >ffffc90003899000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 118.328971][ T6356] ^ [ 118.328978][ T6356] ffffc90003899080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 118.328987][ T6356] ffffc90003899100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 118.328994][ T6356] ================================================================== [ 118.363177][ T6356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.363194][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 118.363211][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.363220][ T6356] Call Trace: [ 118.363227][ T6356] [ 118.363232][ T6356] dump_stack_lvl+0x3d/0x1f0 [ 118.363254][ T6356] vpanic+0x640/0x6f0 [ 118.363275][ T6356] panic+0xca/0xd0 [ 118.363293][ T6356] ? __pfx_panic+0x10/0x10 [ 118.363313][ T6356] ? sys_imageblit+0x1a6f/0x1e60 [ 118.363330][ T6356] ? preempt_schedule_common+0x44/0xc0 [ 118.363346][ T6356] ? preempt_schedule_thunk+0x16/0x30 [ 118.363370][ T6356] check_panic_on_warn+0xab/0xb0 [ 118.363391][ T6356] end_report+0x107/0x170 [ 118.363409][ T6356] kasan_report+0xee/0x110 [ 118.363427][ T6356] ? sys_imageblit+0x1a6f/0x1e60 [ 118.363447][ T6356] sys_imageblit+0x1a6f/0x1e60 [ 118.363465][ T6356] ? __pfx_sys_imageblit+0x10/0x10 [ 118.363487][ T6356] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 118.363504][ T6356] soft_cursor+0x524/0xa10 [ 118.363529][ T6356] bit_cursor+0xe8c/0x17e0 [ 118.363552][ T6356] ? __pfx_bit_cursor+0x10/0x10 [ 118.363576][ T6356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.363600][ T6356] ? get_color+0x1da/0x450 [ 118.363618][ T6356] ? __pfx_bit_cursor+0x10/0x10 [ 118.363640][ T6356] fbcon_cursor+0x40c/0x5a0 [ 118.363669][ T6356] ? do_blank_screen+0x591/0x5a0 [ 118.363692][ T6356] set_cursor+0x1db/0x250 [ 118.363714][ T6356] con_write+0x89/0xb0 [ 118.363731][ T6356] do_output_char+0x5d9/0x840 [ 118.363751][ T6356] n_tty_write+0x4fe/0x11e0 [ 118.363776][ T6356] ? __pfx_n_tty_write+0x10/0x10 [ 118.363794][ T6356] ? trace_kmalloc+0x2b/0xd0 [ 118.363812][ T6356] ? __pfx_woken_wake_function+0x10/0x10 [ 118.363835][ T6356] ? kfree+0x252/0x6d0 [ 118.363847][ T6356] ? __pfx_n_tty_write+0x10/0x10 [ 118.363865][ T6356] file_tty_write.constprop.0+0x503/0x9b0 [ 118.363884][ T6356] redirected_tty_write+0xd4/0x150 [ 118.363899][ T6356] vfs_write+0x7d3/0x11d0 [ 118.363915][ T6356] ? __pfx_redirected_tty_write+0x10/0x10 [ 118.363938][ T6356] ? __pfx_vfs_write+0x10/0x10 [ 118.363954][ T6356] ? find_held_lock+0x2b/0x80 [ 118.363974][ T6356] ksys_write+0x12a/0x250 [ 118.363988][ T6356] ? __pfx_ksys_write+0x10/0x10 [ 118.364010][ T6356] do_syscall_64+0xcd/0xfa0 [ 118.364026][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.364041][ T6356] RIP: 0033:0x7fdbdf78efc9 [ 118.364052][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.364066][ T6356] RSP: 002b:00007fdbe0653038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.364080][ T6356] RAX: ffffffffffffffda RBX: 00007fdbdf9e6090 RCX: 00007fdbdf78efc9 [ 118.364090][ T6356] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 118.364099][ T6356] RBP: 00007fdbdf811f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.364108][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.364116][ T6356] R13: 00007fdbdf9e6128 R14: 00007fdbdf9e6090 R15: 00007ffda80dd508 [ 118.364130][ T6356] [ 118.364267][ T6356] Kernel Offset: disabled