last executing test programs: 8.340515875s ago: executing program 0 (id=63): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101041, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x346) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(0xffffffffffffffff, 0x40789440, &(0x7f0000000040)={0x3, 0x7, 0x7, 0x41c, 0x1, 0x8, 0x7, 0x0, 0x4c6, "fd7af19c68a98cf3f3f69956c99d0a1c3965f70878cc6718f1a366b6da2316356e80964755e2b3d34e504d1c53537dd935aa8799985b7b76b49dce6eac472f9a"}) io_uring_setup$auto(0x59, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x7, 0x7f, 0x860, 0x0, 0x1, 0x45079941, 0x8, {0x47a8, 0x7}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0xffffffffffffffff, 0xb4, 0x800, 0xf9}) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x2, 0x0, 0x1) unshare$auto(0x40000080) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xf34) socket(0x22, 0x5, 0x80) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) eventfd$auto(0x60600) sendfile$auto(r1, r1, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0) 7.220411449s ago: executing program 2 (id=67): openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x125000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) mmap$auto(0x0, 0x4020009, 0x2df, 0x12, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x129842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(0x0, 0x2, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r2) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r3, 0x1, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) 6.964568769s ago: executing program 3 (id=69): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x10001, 0x2000040080000004, 0xe) madvise$auto(0x80000001, 0x2, 0x9) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) r1 = socket(0x2c, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) epoll_create$auto(0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x280, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x7ffffffc) socketpair$auto(0x7, 0xd540, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.905276821s ago: executing program 2 (id=70): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3, 0x408, 0x4d6, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_RNDRESEEDCRNG2(r1, 0x5207, 0x99) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x1002, 0xc, 0x4, 0x200000eb0, 0x401, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x1000000d, 0x0, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) mprotect$auto(0x0, 0x8000000000000001, 0xa) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b62, r3) 6.896279413s ago: executing program 1 (id=71): socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x26, 0x100001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr/parameters/allow_writes\x00', 0xa0302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5, 0x0, 0xfff0}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8d4) 6.489635613s ago: executing program 1 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x19, 0x10d, "9bfcc642fb8222e81879d39dc6fd94f765ecdeabfd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cfedbdf256a000000060098003f0000000400460108009f0009000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000085) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0xc, 0x1, 'nl80211\x00'}, @NFSD_A_POOL_MODE_MODE={0xc, 0x1, 'nl80211\x00'}, @NFSD_A_POOL_MODE_MODE={0x7, 0x1, '-/\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000300), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "d3074c05bc31abc686245de1ffc52b1a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) madvise$auto(0x0, 0x200007, 0x8) 6.147514347s ago: executing program 3 (id=73): openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001, 0x0) listen$auto(r0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x9, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x8000040006) 6.080011295s ago: executing program 0 (id=74): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) 5.838246686s ago: executing program 1 (id=75): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) capset$auto(&(0x7f0000000180)={0x5e1}, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd10/sched/read2_next_rq\x00', 0x2402, 0x0) ioctl$auto(r1, 0x9, r2) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000240)) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getpid() ioctl$auto(r4, 0x400454ca, 0x38) mmap$auto(0x0, 0xe982, 0x400, 0x13, r1, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r5, 0x29, 0x36, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000380)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.109520462s ago: executing program 2 (id=76): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a8000, 0x0) r1 = getpgid(0xffffffffffffffff) prctl$auto(0x3e, 0x6, r1, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8001, 0x0) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200040000005, 0x7, 0x7, 0x0, 0x80, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x9, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, &(0x7f0000000180)={[0x6, 0x8000, 0x100000000, 0x8000000000000001, 0x7f, 0x2000000, 0x7, 0x8, 0x8, 0x2, 0x8, 0x10, 0x5, 0x9, 0x9, 0x2]}, &(0x7f0000000080)={0x800000000001ff, 0x1000000000000401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) mmap$auto(0x545, 0xfffffffffffffffe, 0x2, 0xeb1, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x0, 0x0, 0x20803) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r2, 0x1, 0x44, &(0x7f0000000180)='\x91u\xe5?{\x00\x00\x00', 0x7) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040060}, 0x40) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) 5.109326924s ago: executing program 3 (id=77): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0900007371b091fa82cb3a4f3b61a1f257a106ccae1eba51841c7ca25fb36fdda33f12405f496998abd365f625e4e8d6bec6001d0e57a9fb26b49bc35eda7b26575e0b54ca8f6c39442b147789f5b0186cdcbee240ae40e93a453c6dfc288cdaf06fb53394a967856d1d935d616d7a041b0935b3002d6ed4c10d617a9f7834fd9f7cee1beb639214dda83caf3449cc621374d1ef09ab1007a12b12287aa820456950de7677e73d5ac5799eca89e4110654f4287692499133f76af3cbb426c02e178d3b40", @ANYRES32=r2, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc80589a", 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x50) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x2000000, 0x0, 0xfffffffb], {0xd74c, 0x6, 0x4, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x1, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x6, 0x0, 0x18) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$auto_EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2, 0x2, 0x1, 0x2}) r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000240), 0x105040, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r6, &(0x7f0000000280)="28dd073bf64bae814d01757821027100201c589f76d1a04623d236c7930bc6f44e6e45747a64158c7ffef5cdc58c", 0x2e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x200801, 0x0) 4.094751317s ago: executing program 2 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) 4.051726574s ago: executing program 1 (id=79): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty29\x00', 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x3, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x62, 0x7ffffffe, 0xca00, 0x6d3f, 0xffffffff, 0x2, 0xfffffffffffffffa]}, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x8000000000000001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x4aa22, 0x0) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffce}, 0x1, 0x0, 0x0, 0x3}, 0x8000007}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0x84100, 0x0) 3.873626881s ago: executing program 3 (id=80): syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x7, 0x3, 0x2) unshare$auto(0x40000080) chdir$auto(0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40001, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x24080, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0x100, 0x1ff, 0xfffffffc, 0xfffffffe}) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x7b142672) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/power/runtime_suspended_time\x00', 0x200, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8000001e, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) 3.67894733s ago: executing program 1 (id=81): ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) mmap$auto(0x0, 0x2020001, 0x6, 0xebe, r0, 0x18000) select$auto(0x19, 0x0, 0x0, &(0x7f0000000040)={[0x6e1, 0x5, 0xd, 0x8fd6, 0x7f, 0x9, 0x9, 0x2, 0x3, 0x9, 0x80000001, 0x10007, 0x1, 0x30000, 0x1, 0x1]}, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x5c8d) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone$auto(0x4, 0x9, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) readv$auto(r3, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) mmap$auto(0x0, 0x8, 0xdb, 0x9b72, 0x1000, 0x0) setrlimit$auto(0xb, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) kill$auto(0x0, 0x21) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x7ff, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) 3.67131716s ago: executing program 2 (id=82): mmap$auto(0xffffffffffbfffff, 0x8d, 0xdf, 0xebf, 0xffffffffffffffff, 0x8a) r0 = socket(0xa, 0x1, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) splice$auto(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000000000, 0x6) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/fmalloc/free_vmap_area_noflush/fo\"mat\x00') r3 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$auto_EXT4_IOC_MIGRATE(r3, 0x6609, 0x0) 3.389428947s ago: executing program 0 (id=83): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() mmap$auto(0x1000, 0x1000040009, 0xdf, 0x9bf2, r2, 0x0) 2.194212063s ago: executing program 0 (id=84): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x3, 0x80000003) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x1800, 0x4, 0x0, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) open(&(0x7f0000000140)='./file0\x00', 0xaa4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b65, 0x1) socket(0x18, 0xb5386fa0d5d5a24a, 0xf) 1.440974092s ago: executing program 3 (id=85): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffff39, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) io_uring_setup$auto(0x2f8, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1.407233929s ago: executing program 1 (id=86): mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x115041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @inferred=r1, 0x80000002, 0x5, 0x2}, 0x0, 0x10000000002, 0x8) socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x40, 0x21cb, 0xdf, 0x90, r2, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) msgsnd$auto(0x0, &(0x7f0000000180)={0x7, 0x5}, 0x5, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.198569s ago: executing program 2 (id=87): ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) mmap$auto(0x0, 0x2020001, 0x6, 0xebe, r0, 0x18000) select$auto(0x19, 0x0, 0x0, &(0x7f0000000040)={[0x6e1, 0x5, 0xd, 0x8fd6, 0x7f, 0x9, 0x9, 0x2, 0x3, 0x9, 0x80000001, 0x10007, 0x1, 0x30000, 0x1, 0x1]}, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x5c8d) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone$auto(0x4, 0x9, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) readv$auto(r3, &(0x7f0000000040)={&(0x7f0000000100)}, 0x8) mmap$auto(0x0, 0x8, 0xdb, 0x9b72, 0x1000, 0x0) setrlimit$auto(0xb, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) syz_clone(0xb2028100, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x7ff, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) 1.033556768s ago: executing program 3 (id=88): mmap$auto(0x0, 0x202000b, 0x3, 0xeba, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x3f, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) r0 = socket(0x2, 0x0, 0x0) setrlimit$auto(0xff, &(0x7f0000000100)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x5, 0x40000d, 0xffffffffffffffff, 0x9b72, r0, 0x7ffc) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x305000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) r3 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x200, 0x0) fanotify_mark$auto(r3, 0x72d, 0x2, 0xffffffffffffffff, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyw6\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto(r0, 0x0, 0x2) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 993.744162ms ago: executing program 0 (id=89): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1, @ANYBLOB="f3d32731cd398624f4cd06d7802fe8b756ccc7842b5805f8677dd40c79f9e91b98bf71d4e0503caa85631dc1e98b710acdc6fe1c04412e68447418097c43892e914aa6478e1134fb5fe9c940f0aa8c79fc462811e195a3b7c7f108", @ANYRESDEC, @ANYRESHEX=r0], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x1ff, 0x0, 0x5, @_sigchld={0xffffffffffffffff, 0xee01, 0x4, 0x10, 0x57ab}}}, 0x8, &(0x7f0000000340)={{0x400, 0x7}, {0x1, 0x9}, 0x9, 0xf, 0x9137, 0x200, 0xffffffff, 0x1, 0x7, 0x1, 0xe, 0x3, 0x71, 0x5, 0x8, 0x10001}) shmctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000200)={{0x9, 0x0, 0x0, 0xffff, 0x200, 0x3bf8, 0xe}, 0x7, 0xbaf, 0xd, 0x5c64, @inferred=0xffffffffffffffff, @inferred, 0xe, 0x0, &(0x7f0000000400)="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", &(0x7f0000000500)="9dba49a7efa79f9360e9598b1be09c823fe3c0388996ae406565767d17b45e95e46562e05b0f8c879dbcaef7b8983d0a35653ca88172347ecabc9cc392e0e2a81b7c422c7b9b9f59cb23d1ecfd57daaf6c3444dd6905f73e4380280e41a38c644deb4e3ee4979f84a623495e9255a799df5dfd59510e90555cfc8284f8fdfdb90c8cf9e1d6d0a8e6cb14d898ff403e5ea52c3e3c290f3fe171aaa6e8fa6e179460b80c5dd2312b17a9b9cddab086764b3f68411f586a5226101c0f2434ee00b1ead4b93820c00abcae234b9a9672fb78bd0124359141"}) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r8, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) sendmsg$auto_NL80211_CMD_DEL_KEY(r1, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x454, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_FILS_DISCOVERY={0x26c, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9ef}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x26, 0x3, "97154cbdf0aa8e3b1dd7d02f13b3574e19f7ed97c31363a16ba8d1eb7425a28622f0"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc7, 0x3, "d01d3ce1ebe572c2fb1fa39f585322c90c2f2c1eb3a049cf7783f5a122d7397616b10904d8e9d6a40444c7eb36053b03e74265787ce787962259510923df22572fb9e1dd1213de592b6bee00aab9acb17027470b1d2c6172ee64a49739996b0c8629cb72f2da0ba51d297640852eceac2c745c8a5bf4bbb6a046baa2a309701fb7342888db5389f47b90981b7a434a219faff40c5eb3a8c1dfb46e770e273055455ed765cee7636e742b8b76b8ce81fb0a3502e68c88ffa38a1b59a8e5a6b3dfbbded5"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xe8be}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x88, 0x3, "5cf19e4cf0e2f2667d95b4a361a07d68fb5728d0aea515b7e8e4ab1f8b7f72630d110f7a97f8d4aaadd250fca734fa724b42d1ace16bbf56869fb1cba1de7e25350c1a1e213270db2cceb413a92991e83045723241f10844fbc877542eb57ae1bc20bb099d4e80e99d77fef74ec0b20ac7abe458786644f2868a2c93f8fc24ad495ca16b"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc7, 0x3, "520cb42a0ba0b06c548ba6718aa1982e45e6eae1b652b1134a499afef04db9db791ef9dfae18f26bcf1ae84c6d255e37d6b869ad1041f59771c31d818d548829531ac346d81c0bd56081dca014e06ee3221151fe2a3abff4e6b3d9e0d73eaf3e68029cffa727ddd1ccfbc08c5e230dad8f98c64fb0b0f90d59931926390e5b1f70a3bbe9860c7d45dcc7f7736875d2ff14f833cd885ea41f55f5ed906d0918b00b07e76154192ad5eab618a8ea1506d993ba0519ef13153845b73570dcefd9f5cccb82"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9}]}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_PMKR0_NAME={0x6, 0x102, "7004"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1b8, 0x145, 0x0, 0x1, [@nested={0xab, 0x11b, 0x0, 0x1, [@typed={0x4, 0x110}, @generic="854b37975478cf1268d19899948166133bd602564ce2d926830595ab4974783d3289add617bb8eb4fa8daf127ad7d450fdd26f02028e3b499b89fcc55e8004b76341a769", @typed={0x4, 0xc1}, @generic="894c4f92eeec13014c88918359086b205a0f643bccf966deafbd3fa2b098fd8801244968b1ad01291f30e2caf4fb1bad08882585edb71cfe241232f8ad3cd38a3b9f5c4250d940744083a98657e09f298bf7d31df509bc3a26618f"]}, @nested={0xc9, 0x138, 0x0, 0x1, [@generic="c7c4bdbceee456903b788b7aa4b6ca593e89436f0546521b003de9edf2c66adece1593a03b11ef1828eca047696eefb429869f55d9245caf346f79dc204123345a13f8dd375d6c54b0d8ca1614272ab5bd8985ea308a040875c14f1a27e400933e7d284c59c4f69ef0453df091613e28b7d4dc49be97db2ffc174fd3484b93220cca3a1f", @generic="b7e40a314b5b3ecc17a0258f12837beb45e37d0907cce1cafb2fdfdba302fad7f02a1d31f9ec2d3ee3356c52b5bb5900b2f5a77384d78e6c57951c6717704d926e"]}, @typed={0x16, 0x6, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x1c, 0x8d, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @pid=r6}, @typed={0xe, 0x33, 0x0, 0x0, @str='&^}$.{&^]\x00'}]}, @typed={0x8, 0x143, 0x0, 0x0, @uid=r7}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x48000}, 0x80c0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x3, 0xd, 0x5, 0x948b, 0xd74a, 0x15f4da0a, 0x6, 0xc930, 0x64, 0x8, 0x9, 0x400000000000000b, 0x9, 0x5, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0x8, 0x400000000007, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) 0s ago: executing program 0 (id=90): mmap$auto(0x4, 0x1000000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) (async) close_range$auto(0x0, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r1) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) epoll_create$auto(0x3e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ecryptfs/version\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/150, 0x96) (async) epoll_ctl$auto(r1, 0x9, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 71.252309][ T5811] cgroup: Unknown subsys name 'net' [ 71.402428][ T5811] cgroup: Unknown subsys name 'cpuset' [ 71.411529][ T5811] cgroup: Unknown subsys name 'rlimit' [ 71.634777][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.641311][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 72.976151][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.836380][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.848042][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.856518][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.875566][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.885123][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.892356][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.899875][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.903652][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.908051][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.917250][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.923267][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.928821][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.943693][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.952212][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.953569][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.960139][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.968144][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.981794][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.009947][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.020632][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.459097][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 75.589081][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 75.616561][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.753551][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.765117][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.772519][ T5822] bridge_slave_0: entered allmulticast mode [ 75.779731][ T5822] bridge_slave_0: entered promiscuous mode [ 75.811469][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.818789][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.826087][ T5822] bridge_slave_1: entered allmulticast mode [ 75.833557][ T5822] bridge_slave_1: entered promiscuous mode [ 75.841586][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 75.917938][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.925149][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.932709][ T5827] bridge_slave_0: entered allmulticast mode [ 75.940060][ T5827] bridge_slave_0: entered promiscuous mode [ 75.969598][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.976741][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.983993][ T5831] bridge_slave_0: entered allmulticast mode [ 75.991835][ T5831] bridge_slave_0: entered promiscuous mode [ 75.999331][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.006510][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.014549][ T5827] bridge_slave_1: entered allmulticast mode [ 76.021780][ T5827] bridge_slave_1: entered promiscuous mode [ 76.032338][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.052610][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.060449][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.067741][ T5831] bridge_slave_1: entered allmulticast mode [ 76.075063][ T5831] bridge_slave_1: entered promiscuous mode [ 76.107322][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.165365][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.179321][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.211684][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.223210][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.234909][ T5822] team0: Port device team_slave_0 added [ 76.274183][ T5822] team0: Port device team_slave_1 added [ 76.280303][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.288422][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.295595][ T5823] bridge_slave_0: entered allmulticast mode [ 76.303169][ T5823] bridge_slave_0: entered promiscuous mode [ 76.341948][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.349396][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.356536][ T5823] bridge_slave_1: entered allmulticast mode [ 76.364033][ T5823] bridge_slave_1: entered promiscuous mode [ 76.373167][ T5831] team0: Port device team_slave_0 added [ 76.380716][ T5827] team0: Port device team_slave_0 added [ 76.419262][ T5831] team0: Port device team_slave_1 added [ 76.427902][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.439346][ T5827] team0: Port device team_slave_1 added [ 76.445955][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.453218][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.479355][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.503257][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.524144][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.531267][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.557406][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.608004][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.615121][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.641648][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.663873][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.671123][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.697239][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.709917][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.716974][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.743452][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.755282][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.762332][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.788757][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.801971][ T5823] team0: Port device team_slave_0 added [ 76.838677][ T5823] team0: Port device team_slave_1 added [ 76.897206][ T5822] hsr_slave_0: entered promiscuous mode [ 76.903714][ T5822] hsr_slave_1: entered promiscuous mode [ 76.950719][ T5831] hsr_slave_0: entered promiscuous mode [ 76.957014][ T5831] hsr_slave_1: entered promiscuous mode [ 76.963425][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 76.969295][ T5831] Cannot create hsr debugfs directory [ 76.980529][ T5827] hsr_slave_0: entered promiscuous mode [ 76.986906][ T5827] hsr_slave_1: entered promiscuous mode [ 76.988828][ T5832] Bluetooth: hci0: command tx timeout [ 76.993509][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 76.998490][ T5829] Bluetooth: hci1: command tx timeout [ 77.003829][ T5827] Cannot create hsr debugfs directory [ 77.015525][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.022605][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.049284][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.062025][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.069381][ T5832] Bluetooth: hci2: command tx timeout [ 77.075183][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.078215][ T5832] Bluetooth: hci3: command tx timeout [ 77.101143][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.285327][ T5823] hsr_slave_0: entered promiscuous mode [ 77.292008][ T5823] hsr_slave_1: entered promiscuous mode [ 77.298379][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 77.304152][ T5823] Cannot create hsr debugfs directory [ 77.665197][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.678766][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.697501][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.709837][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.775831][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.789669][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.803916][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.815750][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.926888][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.952802][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.980693][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.992018][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.004064][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.073592][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.095003][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.106254][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.129295][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.143869][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.160937][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.168301][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.194113][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.201369][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.233458][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.302388][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.328055][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.335246][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.366904][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.374128][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.485696][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.507026][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.563328][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.600349][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.607632][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.642047][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.662161][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.669482][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.737609][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.744849][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.773205][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.780428][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.851200][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.974739][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.069317][ T5832] Bluetooth: hci0: command tx timeout [ 79.070587][ T5822] veth0_vlan: entered promiscuous mode [ 79.074759][ T5832] Bluetooth: hci1: command tx timeout [ 79.121938][ T5822] veth1_vlan: entered promiscuous mode [ 79.151284][ T5832] Bluetooth: hci3: command tx timeout [ 79.151293][ T5829] Bluetooth: hci2: command tx timeout [ 79.193257][ T5831] veth0_vlan: entered promiscuous mode [ 79.218179][ T5822] veth0_macvtap: entered promiscuous mode [ 79.238970][ T5822] veth1_macvtap: entered promiscuous mode [ 79.262420][ T5831] veth1_vlan: entered promiscuous mode [ 79.330846][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.373713][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.386029][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.402879][ T5831] veth0_macvtap: entered promiscuous mode [ 79.426334][ T3506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.436915][ T3506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.446470][ T5831] veth1_macvtap: entered promiscuous mode [ 79.458124][ T3506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.494048][ T3506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.532483][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.559196][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.583224][ T5823] veth0_vlan: entered promiscuous mode [ 79.623844][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.650499][ T5823] veth1_vlan: entered promiscuous mode [ 79.669497][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.679950][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.694285][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.718676][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.728836][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.750939][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.785097][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.803687][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.894366][ T5823] veth0_macvtap: entered promiscuous mode [ 79.903005][ T5827] veth0_vlan: entered promiscuous mode [ 79.910604][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.938716][ T5823] veth1_macvtap: entered promiscuous mode [ 79.953665][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.977589][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.005179][ T5827] veth1_vlan: entered promiscuous mode [ 80.077122][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.093213][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.100322][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.115849][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.142174][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.166778][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.185855][ T5827] veth0_macvtap: entered promiscuous mode [ 80.209885][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223593][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.245656][ T5827] veth1_macvtap: entered promiscuous mode [ 80.354300][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.409491][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.474153][ T3506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.500740][ T3506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.521430][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538178][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.552840][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.568151][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730131][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.736618][ T5913] FAULT_INJECTION: forcing a failure. [ 80.736618][ T5913] name fail_futex, interval 1, probability 0, space 0, times 1 [ 80.748165][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.769991][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 80.770029][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.770052][ T5913] Call Trace: [ 80.770060][ T5913] [ 80.770074][ T5913] dump_stack_lvl+0x100/0x190 [ 80.770128][ T5913] should_fail_ex.cold+0x5/0xa [ 80.770161][ T5913] get_futex_key+0x1d2/0x1620 [ 80.770199][ T5913] ? __pfx_get_futex_key+0x10/0x10 [ 80.770231][ T5913] ? putname+0xb1/0x110 [ 80.770256][ T5913] ? kasan_save_stack+0x3f/0x50 [ 80.770294][ T5913] ? kasan_save_stack+0x30/0x50 [ 80.770330][ T5913] ? kasan_save_track+0x14/0x30 [ 80.770365][ T5913] ? kasan_save_free_info+0x3b/0x70 [ 80.770391][ T5913] ? __kasan_slab_free+0x5f/0x80 [ 80.770428][ T5913] ? kmem_cache_free+0x124/0x6a0 [ 80.770466][ T5913] futex_wake+0xea/0x530 [ 80.770509][ T5913] ? __pfx_futex_wake+0x10/0x10 [ 80.770565][ T5913] do_futex+0x32b/0x350 [ 80.770601][ T5913] ? __pfx_do_futex+0x10/0x10 [ 80.770645][ T5913] __x64_sys_futex+0x34f/0x4d0 [ 80.770685][ T5913] ? __pfx___x64_sys_futex+0x10/0x10 [ 80.770743][ T5913] do_syscall_64+0x106/0xf80 [ 80.770775][ T5913] ? clear_bhb_loop+0x40/0x90 [ 80.770810][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.770838][ T5913] RIP: 0033:0x7f95e0d9c629 [ 80.770872][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.770903][ T5913] RSP: 002b:00007f95e1b9f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.770932][ T5913] RAX: ffffffffffffffda RBX: 00007f95e1016098 RCX: 00007f95e0d9c629 [ 80.770950][ T5913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f95e101609c [ 80.770965][ T5913] RBP: 00007f95e1016090 R08: 0000000000000000 R09: 0000000000000000 [ 80.770980][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.770994][ T5913] R13: 00007f95e1016128 R14: 00007ffe133d0b90 R15: 00007ffe133d0c78 [ 80.771027][ T5913] [ 81.148485][ T5832] Bluetooth: hci1: command tx timeout [ 81.149771][ T5829] Bluetooth: hci0: command tx timeout [ 81.229152][ T5829] Bluetooth: hci3: command tx timeout [ 81.229833][ T5832] Bluetooth: hci2: command tx timeout [ 81.243891][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.257759][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.433578][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.470280][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.677059][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.756687][ T5921] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5'. [ 82.007451][ T5921] futex_wake_op: syz.1.5 tries to shift op by -2048; fix this program [ 82.068265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.388099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 82.458587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.467313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.592796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.688540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.698095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 82.707823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 82.988438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.019255][ T10] cfg80211: failed to load regulatory.db [ 83.227854][ T5832] Bluetooth: hci1: command tx timeout [ 83.230611][ T5829] Bluetooth: hci0: command tx timeout [ 83.243486][ T5951] Invalid ELF header magic: != ELF [ 83.308645][ T5829] Bluetooth: hci3: command tx timeout [ 83.309074][ T5832] Bluetooth: hci2: command tx timeout [ 83.408172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.006286][ T5968] random: crng reseeded on system resumption [ 85.065713][ T5968] hub 1-0:1.0: USB hub found [ 85.074002][ T5968] hub 1-0:1.0: 1 port detected [ 87.129805][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.590056][ T6029] random: crng reseeded on system resumption [ 89.620146][ T6029] hub 1-0:1.0: USB hub found [ 89.639712][ T6029] hub 1-0:1.0: 1 port detected [ 90.183537][ T6042] netlink: 'syz.1.23': attribute type 21 has an invalid length. [ 90.194782][ T6042] netlink: 326 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.204127][ T6042] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.218078][ T6052] [U] 0="/ [ 91.235108][ T6054] Invalid ELF header magic: != ELF [ 91.277866][ T6052] [U] [ 91.280741][ T6052] [U] EeQ@ [ 91.379018][ T6051] [U]  [ 92.008186][ T6069] misc userio: Invalid payload size [ 94.407782][ T6094] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 96.135657][ T6110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.421911][ T6136] netlink: 354 bytes leftover after parsing attributes in process `syz.3.40'. [ 99.489689][ T6136] Zero length message leads to an empty skb [ 99.862351][ T6141] input: f as /devices/virtual/input/input5 [ 100.761496][ T6145] netlink: 342 bytes leftover after parsing attributes in process `syz.0.43'. [ 101.508717][ T6167] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 101.510928][ T6167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.862717][ T6166] ima: policy update failed [ 101.901305][ T29] audit: type=1802 audit(1771655920.384:2): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.49" res=0 errno=0 [ 102.238920][ T6175] netlink: 354 bytes leftover after parsing attributes in process `syz.1.50'. [ 103.323242][ T6171] random: crng reseeded on system resumption [ 103.389232][ T6174] hub 1-0:1.0: USB hub found [ 103.438443][ T6174] hub 1-0:1.0: 1 port detected [ 103.808362][ T6196] random: crng reseeded on system resumption [ 103.952879][ T6194] hub 1-0:1.0: USB hub found [ 104.049673][ T6194] hub 1-0:1.0: 1 port detected [ 104.702364][ T6217] FAULT_INJECTION: forcing a failure. [ 104.702364][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.762176][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.1.59 Not tainted syzkaller #0 PREEMPT(full) [ 104.762218][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.762233][ T6217] Call Trace: [ 104.762242][ T6217] [ 104.762252][ T6217] dump_stack_lvl+0x100/0x190 [ 104.762298][ T6217] should_fail_ex.cold+0x5/0xa [ 104.762330][ T6217] _copy_from_iter+0x43a/0x1690 [ 104.762390][ T6217] ? __pfx__copy_from_iter+0x10/0x10 [ 104.762423][ T6217] ? rcu_is_watching+0x12/0xc0 [ 104.762456][ T6217] ? trace_kmalloc+0x101/0x130 [ 104.762478][ T6217] ? __kasan_kmalloc+0xaa/0xb0 [ 104.762515][ T6217] ? __kmalloc_noprof+0x320/0x850 [ 104.762557][ T6217] kernfs_fop_write_iter+0x186/0x5f0 [ 104.762599][ T6217] ? copy_iovec_from_user+0x102/0x140 [ 104.762641][ T6217] do_iter_readv_writev+0x6ee/0x920 [ 104.762679][ T6217] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 104.762727][ T6217] vfs_writev+0x360/0xe10 [ 104.762759][ T6217] ? rcu_is_watching+0x12/0xc0 [ 104.762814][ T6217] ? __pfx_vfs_writev+0x10/0x10 [ 104.762845][ T6217] ? fdget_pos+0x2aa/0x380 [ 104.762870][ T6217] ? find_held_lock+0x2b/0x80 [ 104.762934][ T6217] ? __fget_files+0x21f/0x3d0 [ 104.762984][ T6217] ? do_writev+0x13e/0x340 [ 104.763018][ T6217] do_writev+0x13e/0x340 [ 104.763056][ T6217] ? __pfx_do_writev+0x10/0x10 [ 104.763099][ T6217] do_syscall_64+0x106/0xf80 [ 104.763127][ T6217] ? clear_bhb_loop+0x40/0x90 [ 104.763162][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.763188][ T6217] RIP: 0033:0x7fc43419c629 [ 104.763210][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.763235][ T6217] RSP: 002b:00007fc435111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 104.763260][ T6217] RAX: ffffffffffffffda RBX: 00007fc434415fa0 RCX: 00007fc43419c629 [ 104.763278][ T6217] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 104.763294][ T6217] RBP: 00007fc435111090 R08: 0000000000000000 R09: 0000000000000000 [ 104.763310][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.763326][ T6217] R13: 00007fc434416038 R14: 00007fc434415fa0 R15: 00007ffc016b58f8 [ 104.763361][ T6217] [ 104.775583][ T6220] netlink: 354 bytes leftover after parsing attributes in process `syz.0.60'. [ 105.970867][ T6238] random: crng reseeded on system resumption [ 106.138945][ T6238] hub 1-0:1.0: USB hub found [ 106.177987][ T6238] hub 1-0:1.0: 1 port detected [ 106.832372][ T6263] zswap: compressor not available [ 110.860913][ T6325] FAULT_INJECTION: forcing a failure. [ 110.860913][ T6325] name failslab, interval 1, probability 0, space 0, times 1 [ 110.917801][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) [ 110.917839][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.917855][ T6325] Call Trace: [ 110.917864][ T6325] [ 110.917875][ T6325] dump_stack_lvl+0x100/0x190 [ 110.917922][ T6325] should_fail_ex.cold+0x5/0xa [ 110.917955][ T6325] should_failslab+0xc2/0x120 [ 110.918004][ T6325] __kmalloc_cache_noprof+0x7a/0x6f0 [ 110.918022][ T6325] ? do_kimage_alloc_init+0x40/0x320 [ 110.918049][ T6325] do_kimage_alloc_init+0x40/0x320 [ 110.918071][ T6325] do_kexec_load+0x11b/0x810 [ 110.918088][ T6325] ? __pfx_do_kexec_load+0x10/0x10 [ 110.918105][ T6325] ? _copy_from_user+0x59/0xd0 [ 110.918128][ T6325] __x64_sys_kexec_load+0x1bf/0x230 [ 110.918145][ T6325] do_syscall_64+0x106/0xf80 [ 110.918161][ T6325] ? clear_bhb_loop+0x40/0x90 [ 110.918179][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.918195][ T6325] RIP: 0033:0x7fc26159c629 [ 110.918208][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.918225][ T6325] RSP: 002b:00007fc26237a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 110.918241][ T6325] RAX: ffffffffffffffda RBX: 00007fc261816090 RCX: 00007fc26159c629 [ 110.918251][ T6325] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 110.918260][ T6325] RBP: 00007fc261632b39 R08: 0000000000000000 R09: 0000000000000000 [ 110.918269][ T6325] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 110.918278][ T6325] R13: 00007fc261816128 R14: 00007fc261816090 R15: 00007ffda0df49a8 [ 110.918298][ T6325] [ 111.001196][ T6325] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.271967][ T6343] process 'syz.0.84' launched './file0' with NULL argv: empty string added [ 113.386390][ T6363] syz.0.89 (6363) used greatest stack depth: 19672 bytes left [ 113.580643][ T6375] ================================================================== [ 113.580666][ T6375] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 113.580699][ T6375] Write of size 8 at addr ffffc900041f9000 by task syz.0.90/6375 [ 113.580718][ T6375] [ 113.580730][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 113.580757][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.580771][ T6375] Call Trace: [ 113.580778][ T6375] [ 113.580787][ T6375] dump_stack_lvl+0x100/0x190 [ 113.580821][ T6375] print_report+0x156/0x4c9 [ 113.580852][ T6375] ? _raw_spin_lock_irqsave+0x52/0x60 [ 113.580888][ T6375] ? __virt_addr_valid+0x81/0x620 [ 113.580919][ T6375] ? sys_fillrect+0x174a/0x1910 [ 113.580953][ T6375] kasan_report+0xdf/0x1e0 [ 113.580989][ T6375] ? sys_fillrect+0x174a/0x1910 [ 113.581015][ T6375] sys_fillrect+0x174a/0x1910 [ 113.581047][ T6375] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 113.581084][ T6375] bit_clear+0x17d/0x220 [ 113.581122][ T6375] ? __pfx_bit_clear+0x10/0x10 [ 113.581160][ T6375] ? fb_get_color_depth+0x120/0x250 [ 113.581196][ T6375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.581241][ T6375] __fbcon_clear+0x633/0x760 [ 113.581277][ T6375] ? __pfx_bit_clear+0x10/0x10 [ 113.581317][ T6375] fbcon_scroll+0x48b/0x650 [ 113.581354][ T6375] con_scroll+0x464/0x690 [ 113.581385][ T6375] do_con_write+0x6883/0x8540 [ 113.581425][ T6375] ? __pfx_do_con_write+0x10/0x10 [ 113.581463][ T6375] con_write+0x23/0xb0 [ 113.581491][ T6375] n_tty_write+0x44f/0x12d0 [ 113.581535][ T6375] ? __pfx_n_tty_write+0x10/0x10 [ 113.581569][ T6375] ? trace_kmalloc+0x101/0x130 [ 113.581594][ T6375] ? __pfx_woken_wake_function+0x10/0x10 [ 113.581632][ T6375] ? rcu_is_watching+0x12/0xc0 [ 113.581669][ T6375] ? file_tty_write.isra.0+0x694/0x890 [ 113.581696][ T6375] ? kfree+0x2ec/0x6b0 [ 113.581726][ T6375] ? __pfx_n_tty_write+0x10/0x10 [ 113.581762][ T6375] file_tty_write.isra.0+0x4d2/0x890 [ 113.581796][ T6375] redirected_tty_write+0xd4/0x120 [ 113.581826][ T6375] vfs_write+0x6ac/0x1070 [ 113.581863][ T6375] ? __pfx_redirected_tty_write+0x10/0x10 [ 113.581896][ T6375] ? __pfx_vfs_write+0x10/0x10 [ 113.581938][ T6375] ? find_held_lock+0x2b/0x80 [ 113.581987][ T6375] ksys_write+0x12a/0x250 [ 113.582024][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 113.582066][ T6375] do_syscall_64+0x106/0xf80 [ 113.582093][ T6375] ? clear_bhb_loop+0x40/0x90 [ 113.582124][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.582153][ T6375] RIP: 0033:0x7f95e0d9c629 [ 113.582174][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.582200][ T6375] RSP: 002b:00007f95e1bc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.582226][ T6375] RAX: ffffffffffffffda RBX: 00007f95e1015fa0 RCX: 00007f95e0d9c629 [ 113.582243][ T6375] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 113.582259][ T6375] RBP: 00007f95e0e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.582275][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.582291][ T6375] R13: 00007f95e1016038 R14: 00007f95e1015fa0 R15: 00007ffe133d0c78 [ 113.582318][ T6375] [ 113.582327][ T6375] [ 113.582334][ T6375] The buggy address belongs to a vmalloc virtual mapping [ 113.582353][ T6375] Memory state around the buggy address: [ 113.582368][ T6375] ffffc900041f8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 113.582396][ T6375] ffffc900041f8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 113.582414][ T6375] >ffffc900041f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 113.582428][ T6375] ^ [ 113.582441][ T6375] ffffc900041f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 113.582459][ T6375] ffffc900041f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 113.582473][ T6375] ================================================================== [ 113.582488][ T6375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.582506][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 113.582541][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.582557][ T6375] Call Trace: [ 113.582565][ T6375] [ 113.582575][ T6375] dump_stack_lvl+0x100/0x190 [ 113.582614][ T6375] vpanic+0x552/0x970 [ 113.582640][ T6375] ? __pfx_vpanic+0x10/0x10 [ 113.582667][ T6375] ? __pfx_vprintk_emit+0x10/0x10 [ 113.582710][ T6375] ? sys_fillrect+0x174a/0x1910 [ 113.582738][ T6375] panic+0xd1/0xe0 [ 113.582762][ T6375] ? __pfx_panic+0x10/0x10 [ 113.582791][ T6375] ? sys_fillrect+0x174a/0x1910 [ 113.582819][ T6375] ? check_panic_on_warn+0x1f/0x90 [ 113.582861][ T6375] check_panic_on_warn.cold+0x19/0x34 [ 113.582891][ T6375] end_report.part.0+0x3a/0x90 [ 113.582934][ T6375] kasan_report.cold+0xe/0x18 [ 113.582971][ T6375] ? sys_fillrect+0x174a/0x1910 [ 113.583004][ T6375] sys_fillrect+0x174a/0x1910 [ 113.583039][ T6375] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 113.583077][ T6375] bit_clear+0x17d/0x220 [ 113.583116][ T6375] ? __pfx_bit_clear+0x10/0x10 [ 113.583154][ T6375] ? fb_get_color_depth+0x120/0x250 [ 113.583190][ T6375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.583234][ T6375] __fbcon_clear+0x633/0x760 [ 113.583270][ T6375] ? __pfx_bit_clear+0x10/0x10 [ 113.583311][ T6375] fbcon_scroll+0x48b/0x650 [ 113.583349][ T6375] con_scroll+0x464/0x690 [ 113.583379][ T6375] do_con_write+0x6883/0x8540 [ 113.583419][ T6375] ? __pfx_do_con_write+0x10/0x10 [ 113.583457][ T6375] con_write+0x23/0xb0 [ 113.583486][ T6375] n_tty_write+0x44f/0x12d0 [ 113.583528][ T6375] ? __pfx_n_tty_write+0x10/0x10 [ 113.583564][ T6375] ? trace_kmalloc+0x101/0x130 [ 113.583589][ T6375] ? __pfx_woken_wake_function+0x10/0x10 [ 113.583627][ T6375] ? rcu_is_watching+0x12/0xc0 [ 113.583665][ T6375] ? file_tty_write.isra.0+0x694/0x890 [ 113.583691][ T6375] ? kfree+0x2ec/0x6b0 [ 113.583719][ T6375] ? __pfx_n_tty_write+0x10/0x10 [ 113.583755][ T6375] file_tty_write.isra.0+0x4d2/0x890 [ 113.583790][ T6375] redirected_tty_write+0xd4/0x120 [ 113.583821][ T6375] vfs_write+0x6ac/0x1070 [ 113.583858][ T6375] ? __pfx_redirected_tty_write+0x10/0x10 [ 113.583890][ T6375] ? __pfx_vfs_write+0x10/0x10 [ 113.583978][ T6375] ? find_held_lock+0x2b/0x80 [ 113.584029][ T6375] ksys_write+0x12a/0x250 [ 113.584066][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 113.584108][ T6375] do_syscall_64+0x106/0xf80 [ 113.584137][ T6375] ? clear_bhb_loop+0x40/0x90 [ 113.584168][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.584196][ T6375] RIP: 0033:0x7f95e0d9c629 [ 113.584217][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.584243][ T6375] RSP: 002b:00007f95e1bc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.584269][ T6375] RAX: ffffffffffffffda RBX: 00007f95e1015fa0 RCX: 00007f95e0d9c629 [ 113.584288][ T6375] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000 [ 113.584305][ T6375] RBP: 00007f95e0e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.584322][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.584338][ T6375] R13: 00007f95e1016038 R14: 00007f95e1015fa0 R15: 00007ffe133d0c78 [ 113.584365][ T6375] [ 113.584723][ T6375] Kernel Offset: disabled