last executing test programs: 19.284070438s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x3d8, 0x0, r2, [{{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}]}, 0x3d8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 17.45513931s ago: executing program 0 (id=38): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0xc, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x60bb, 0x1, {}, 0x101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r3, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) 16.986413758s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 15.9697013s ago: executing program 2 (id=41): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./bus\x00', 0xc0ed880f, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nobh}]}, 0xf6, 0x47a, &(0x7f0000000680)="$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") sched_setscheduler(0x0, 0x5, &(0x7f0000000c00)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000001c0)={0x3, 0x2}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 15.890474567s ago: executing program 1 (id=42): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x29, 0x14, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081a, &(0x7f0000000280)={[{@grpquota}, {@dax}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}, {@fowner_lt}, {@uid_lt={'uid<', 0xee00}}, {@audit}, {@hash}, {@uid_gt}]}, 0x1, 0x527, &(0x7f0000000c40)="$eJzs3c9vY1cVAOBjJ87vNmnpAlBph7YwoNE4iaeNqi6gLBGqhOgSpGlIPFEUO45ipzRhFtM1WyQqsaJL/gDWXbFgxwbBjk1ZIBWIQA0SC6P3/DzjZOyJO5mxLfv7pCe/d98bn3Od+N7xie0bwMS6FhH3ImImIt6LiOWsPZdt8XZrS677/PTu1tnp3a1cNJvv/jOXnk/aouPfJBaz+5yLiB99HPHT3MNx68cne5uVSvkwO15tVA9W68cnN3ermzvlnfJ+qbSxvrH25q03Sk+sry9XZ7K9r336x3vf/nmS1lLW0tmPSzX7j9nqeuF+nMR0RPyg/7sYaVNZf2aGnQiPJR8Rz0fEK+nzfzmm0p8mADDOms3laC53HgMA4y6f1sBy+WJWC1iKfL5YbNXwXoiFfKVWb9y4Uzva327VylaikL+zWymvZbXClSjkkuP1dP/BcenC8a2IeC4ifjk7nx4Xt2qV7WH+xwcAJtjihfn/P7Ot+R8AGHNzDzd5FwAAjLku839k7+EFAMZUj/kfABhj5n8AmDyt+X9+2GkAAAPk9T8ATB7zPwBMlB++806yNc+y77/efv/4aK/2/s3tcn2vWD3aKm7VDg+KO7XaTvqdPdXL7q9Sqx2svx5HH6x856DeWK0fn9yu1o72G7fT7/W+XS6kV/lkAQAM03Mvf/KXXDIjvzWfbtGxlkNhqJkBT1t+2AkAQzM17ASAofE9XzC5rvAaX3kAxkSXJXrPmev2AaFms/kFlsIFRsz1r6j/w6TqqP97FzBMGPV/mFzt+v+LQ84DGLxmM9fvmv/R74UAwGhT4wd6/P3/+ez2t9kfB36yffGKj55mVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDa2uv/FrO1wJciny8WI56JiJUo5O7sVsprEfFsRPx5tjCbHK8POWcA4Kryf89l639dX35t6dyplxbv785ExM9+/e6vPthsNA7/FDGT+9dsu73xUdZeGnz2AMDl2vN0epu+kM9W9oy7W5+ftrZB5vPZ91opJHHPTmfi7P5CpNMxHa38ChGx8O9cdtyS66hdXMW9DyPiy6345/ufi6W0BtJ6fC7GT2I/M9D4+Xb8+chqNSvZbfJYfOkJ5AKT5pNk/Hm72/MvH9fS2+7P/7l0hLq6bPxL7mrrLB0DH8Rvj39TPca/a/3GeP3332/tzWctD0bOzz6M+Op0RDv2Wcf4046f6xH/tT7j//XFl17pda75m4jr0T1+Z6zVRvVgtX58cnO3urlT3invl0ob6xtrb956o7Sa1qhXe88G/3jrxrO9ziX9X+gRf+6S/n+jz/5//L/3fvz1R8T/1qvd4ufjhUfET+bEb/YZf3Phd3O9ziXxt3v0/7Kf/40+43/6t5OHlg0HAIanfnyyt1mplA8ncif6u/gP2YM1EjlnO6OWz2B2kl6PQBpdd747qFgz0f3UL15t/ZrORnT+YjebjxWr14jxJKpuwCjonE/+22paHHZOAAAAAAAAAAAAAADAeYP4xNKw+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD4+n8AAAD//6o/xrQ=") 14.435008916s ago: executing program 1 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 13.788373044s ago: executing program 2 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008000140000000"], 0x10c}}, 0x0) 13.679041029s ago: executing program 0 (id=46): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.203743146s ago: executing program 3 (id=47): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) 12.086657965s ago: executing program 2 (id=48): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") sched_setscheduler(0x0, 0x1, 0x0) r1 = add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000100)={0x3, 0x0, @b}, 0x48, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0xc9a) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r1}, 0x0, 0x0, 0x0) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x1, {0x0, 0x0, 0x2}}, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r5 = openat(r0, &(0x7f0000000400)='./file1\x00', 0x143142, 0x80) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x51, 0x401, 0x5}) 11.642823946s ago: executing program 4 (id=49): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x57, &(0x7f0000000140)={0x0, 0x2710}, 0x10) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@uid}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") 10.946822536s ago: executing program 3 (id=50): r0 = getpid() syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r0], 0xff, 0x20d, &(0x7f0000001000)="$eJzsmb9rFEEUx78zu/cjQQQbCxsLD4xo9nb3VIKQIoK9EDXa5TBriG5yYW/VS8Ai2NhYWgi2/gMWFqks7OxstdCAYGE67Q5GZnZ2d9i7PTzxziLvA3n5zts3M29n2e/BHQiCOLIcfP315fnVhRsXABxDAzWd/27lNdyo//zy4fkXi9devfn0+v3W8Sf7xfVqY+4vt3m3ZCHGjBoLIYR5vaEis2UXDZ27CY5zWq8YM1bBcUvnAzDc0fq+oTszWoSBc7cTrt3bCANXBk8GX4aWub8N4HCPYQ1AXffHjOvdnd0H7TAMoq6ViiRTEek+UV7zd2LU+an+ljgW9Vj2J5/X7WdP9+TY0XnXOD8PHJ7WLTAsa72AGhzHyY/EuP9Tdr6+NfT+JyWsYqZXqFk9KJt+Yn6Sjf0jUZnCGU5AMKSZ+qjilUf/v9WiYMWMfKGzzMnD/Q+Ds7796RY/t5MXY9iJTeuVKQhlXAAGLn2czTOpcY+zclXPGVqT+5N077OGP9mwM/9oxpvbze7O7vzGZns9WA+2fL912b3oupf8pjKiJA74Xj/zv7ryp1lj/UqJV1ZZFb12HEdeD4gjLxv7STQcd/lt54eaw5X/ccydSdaQD1HddskHHdN/XP1nfYE5q6QdgiAIgiAIgiAIgiAIgiCIMTkNpr4F1T9UiQKAuPJYCOFfV9W/AwAA//+VV18P") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000240)={0x30}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000340)={0x18, r3}) 9.862848646s ago: executing program 0 (id=51): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff], [0x10000, 0x0, 0x6, 0x0, 0x8001, 0x2, 0xfffffffc], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{0x0, 0x1}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x20000000000014, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x12}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x2, 0x4e23, 0xe0000000, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) 9.692876484s ago: executing program 4 (id=52): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRESDEC], 0xff, 0x20d, &(0x7f0000001000)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_GET_API_VERSION(r1, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000340)={0x18, r2}) 9.228643839s ago: executing program 2 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_io_uring_setup(0x2aca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000050) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) 8.645624772s ago: executing program 0 (id=54): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) vmsplice(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f000001b000)}], 0x2, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 7.405075254s ago: executing program 3 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00\x00', @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 7.350879626s ago: executing program 4 (id=56): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x0, 0x1) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) close(0x3) 4.74173889s ago: executing program 3 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) 4.693176569s ago: executing program 0 (id=58): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000100)) shmdt(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4.629710994s ago: executing program 2 (id=59): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 4.483107354s ago: executing program 4 (id=60): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket(0x2b, 0x1, 0x1) bind$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) 4.266027446s ago: executing program 1 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x48004) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) close(r2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 's\x05\x00\x00\x00ller\x00', 0x3a, 'Sy\x00[\xea\xe1lq\x00\x00\x00\x002#', 0x3a, './file0', 0x3a, [0x46]}, 0x40) truncate(&(0x7f0000000040)='./file0\x00', 0x600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 3.595781809s ago: executing program 3 (id=62): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000000800)="$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") ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000080), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x6, 0x10001) 1.802960869s ago: executing program 4 (id=63): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x840) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[], 0xcdc}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x0) statx(r3, 0x0, 0x4000, 0x600, &(0x7f0000000380)) sendto$rxrpc(r3, 0x0, 0x0, 0xb78a4d8a64985449, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x224000, 0x0) fsync(r4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) 1.115380173s ago: executing program 3 (id=64): open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x48) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 987.373687ms ago: executing program 1 (id=65): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.991494ms ago: executing program 0 (id=66): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0xb0, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000006007a0601ff03000000000000000052a200000001ff02000000000000000000000000000116000339070000004e214e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500700009078000145c67360e5cfe27992976f9d813169bce931fd0df83ffc936c0500d5e4bb0af04a6be1baff954570d527826c76e441114cb201f8df5b341e09d8598a22f439e51a02bf6ec8cb37def1eaf70d47e95245d4d43d9c4babc5bfc694b6fdb49a"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) 107.234804ms ago: executing program 4 (id=67): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, 0x0, 0xffffffffa003e45b, 0x700000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x33) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x73, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=68): ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) recvmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 72.158419][ T5848] cgroup: Unknown subsys name 'net' [ 72.294615][ T5848] cgroup: Unknown subsys name 'cpuset' [ 72.303630][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.834947][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.440134][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.449033][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.457703][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.466171][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.474185][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.482493][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.491156][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.499505][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.507030][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.516966][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.523977][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.525382][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.539617][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.572571][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.581524][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.631632][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.641934][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.650366][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.658496][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.666449][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.740647][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.754246][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.763259][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.781443][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.789970][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.013876][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.325081][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.332895][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.340374][ T5863] bridge_slave_0: entered allmulticast mode [ 77.347862][ T5863] bridge_slave_0: entered promiscuous mode [ 77.381892][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.389047][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.396562][ T5863] bridge_slave_1: entered allmulticast mode [ 77.403636][ T5863] bridge_slave_1: entered promiscuous mode [ 77.425409][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 77.472584][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 77.557478][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.608704][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.632878][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 77.688999][ T5863] team0: Port device team_slave_0 added [ 77.705786][ T5863] team0: Port device team_slave_1 added [ 77.788136][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 77.830655][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.837690][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.864130][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.915459][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.922562][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.949211][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.970700][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.978229][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.985417][ T5867] bridge_slave_0: entered allmulticast mode [ 77.992513][ T5867] bridge_slave_0: entered promiscuous mode [ 78.000143][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.007813][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.015087][ T5859] bridge_slave_0: entered allmulticast mode [ 78.023008][ T5859] bridge_slave_0: entered promiscuous mode [ 78.067151][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.074617][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.081850][ T5867] bridge_slave_1: entered allmulticast mode [ 78.088847][ T5867] bridge_slave_1: entered promiscuous mode [ 78.096219][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.103652][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.110848][ T5859] bridge_slave_1: entered allmulticast mode [ 78.118276][ T5859] bridge_slave_1: entered promiscuous mode [ 78.152784][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.160336][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.167883][ T5873] bridge_slave_0: entered allmulticast mode [ 78.175373][ T5873] bridge_slave_0: entered promiscuous mode [ 78.235485][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.242839][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.250067][ T5873] bridge_slave_1: entered allmulticast mode [ 78.257919][ T5873] bridge_slave_1: entered promiscuous mode [ 78.285895][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.298828][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.324734][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.337191][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.413888][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.457676][ T5863] hsr_slave_0: entered promiscuous mode [ 78.464924][ T5863] hsr_slave_1: entered promiscuous mode [ 78.487556][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.512815][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.519993][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.527919][ T5876] bridge_slave_0: entered allmulticast mode [ 78.535205][ T5876] bridge_slave_0: entered promiscuous mode [ 78.543779][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.550963][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.558308][ T5876] bridge_slave_1: entered allmulticast mode [ 78.566656][ T5876] bridge_slave_1: entered promiscuous mode [ 78.574539][ T5867] team0: Port device team_slave_0 added [ 78.582995][ T5867] team0: Port device team_slave_1 added [ 78.601915][ T5866] Bluetooth: hci0: command tx timeout [ 78.602933][ T5862] Bluetooth: hci1: command tx timeout [ 78.616891][ T5859] team0: Port device team_slave_0 added [ 78.676830][ T5859] team0: Port device team_slave_1 added [ 78.683102][ T5862] Bluetooth: hci2: command tx timeout [ 78.700967][ T5873] team0: Port device team_slave_0 added [ 78.725548][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.732776][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.758847][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.771156][ T5862] Bluetooth: hci3: command tx timeout [ 78.787174][ T5873] team0: Port device team_slave_1 added [ 78.795310][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.807372][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.829697][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.836792][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.863168][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.873778][ T5862] Bluetooth: hci4: command tx timeout [ 78.884652][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.892020][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.918240][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.974085][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.981484][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.007899][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.045881][ T5876] team0: Port device team_slave_0 added [ 79.078898][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.086293][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.112463][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.125339][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.132404][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.159388][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.172670][ T5876] team0: Port device team_slave_1 added [ 79.224347][ T5867] hsr_slave_0: entered promiscuous mode [ 79.230836][ T5867] hsr_slave_1: entered promiscuous mode [ 79.237221][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 79.243333][ T5867] Cannot create hsr debugfs directory [ 79.365353][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.372624][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.398621][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.418092][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.425191][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.451169][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.484464][ T5873] hsr_slave_0: entered promiscuous mode [ 79.490892][ T5873] hsr_slave_1: entered promiscuous mode [ 79.497963][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 79.503795][ T5873] Cannot create hsr debugfs directory [ 79.532569][ T5859] hsr_slave_0: entered promiscuous mode [ 79.538758][ T5859] hsr_slave_1: entered promiscuous mode [ 79.544994][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 79.550732][ T5859] Cannot create hsr debugfs directory [ 79.748248][ T5876] hsr_slave_0: entered promiscuous mode [ 79.754743][ T5876] hsr_slave_1: entered promiscuous mode [ 79.762141][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 79.767879][ T5876] Cannot create hsr debugfs directory [ 79.866825][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.903870][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.960787][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.000613][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.085487][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.119204][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.130818][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.164366][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.230947][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.248586][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.266550][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.288214][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.398434][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.409400][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.421207][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.461920][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.518690][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.557306][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.582145][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.593772][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.604367][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.620470][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.635779][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.678369][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.682620][ T5862] Bluetooth: hci1: command tx timeout [ 80.685665][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.698849][ T5862] Bluetooth: hci0: command tx timeout [ 80.707248][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.714420][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.728250][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.746636][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.753842][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.771830][ T5862] Bluetooth: hci2: command tx timeout [ 80.810475][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.817620][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.841600][ T5862] Bluetooth: hci3: command tx timeout [ 80.921179][ T5862] Bluetooth: hci4: command tx timeout [ 80.977058][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.028149][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.073739][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.118310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.125503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.138777][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.145903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.196203][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.227365][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.268691][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.275907][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.316395][ T5873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.334192][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.355699][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.362851][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.383508][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.410287][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.417556][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.447549][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.454740][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.478694][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.599761][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.727498][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.807398][ T5863] veth0_vlan: entered promiscuous mode [ 81.858549][ T5863] veth1_vlan: entered promiscuous mode [ 81.937785][ T5873] veth0_vlan: entered promiscuous mode [ 81.999052][ T5863] veth0_macvtap: entered promiscuous mode [ 82.031702][ T5873] veth1_vlan: entered promiscuous mode [ 82.075445][ T5863] veth1_macvtap: entered promiscuous mode [ 82.178405][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.210584][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.229720][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.244681][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.273328][ T5867] veth0_vlan: entered promiscuous mode [ 82.285471][ T5873] veth0_macvtap: entered promiscuous mode [ 82.294818][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.304359][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.326227][ T5867] veth1_vlan: entered promiscuous mode [ 82.336844][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.348294][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.381144][ T5873] veth1_macvtap: entered promiscuous mode [ 82.450393][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.467217][ T5859] veth0_vlan: entered promiscuous mode [ 82.512911][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.527042][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.538517][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.548477][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.574709][ T3517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.590215][ T5876] veth0_vlan: entered promiscuous mode [ 82.604832][ T3517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.614532][ T3517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.635819][ T5859] veth1_vlan: entered promiscuous mode [ 82.655018][ T5867] veth0_macvtap: entered promiscuous mode [ 82.672723][ T5876] veth1_vlan: entered promiscuous mode [ 82.689190][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.697791][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.704527][ T5867] veth1_macvtap: entered promiscuous mode [ 82.761802][ T5862] Bluetooth: hci0: command tx timeout [ 82.762154][ T5866] Bluetooth: hci1: command tx timeout [ 82.832052][ T5859] veth0_macvtap: entered promiscuous mode [ 82.841567][ T5866] Bluetooth: hci2: command tx timeout [ 82.850700][ T5859] veth1_macvtap: entered promiscuous mode [ 82.863144][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.888363][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.898558][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.909196][ T5876] veth0_macvtap: entered promiscuous mode [ 82.911287][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.923008][ T5866] Bluetooth: hci3: command tx timeout [ 82.948704][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.978756][ T5876] veth1_macvtap: entered promiscuous mode [ 83.001455][ T5866] Bluetooth: hci4: command tx timeout [ 83.027103][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.036367][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.064912][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.105962][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140087][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.163152][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.175429][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.186269][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.207584][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.247100][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279343][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.303957][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.314038][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376353][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.386601][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.430821][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.443297][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.621583][ T5942] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.673837][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.697412][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.292367][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.418195][ T5942] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.438859][ T5942] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.468801][ T5942] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.509817][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.550883][ T5976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.732853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.750855][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.752324][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.786721][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.841161][ T5866] Bluetooth: hci0: command tx timeout [ 84.851936][ T5866] Bluetooth: hci1: command tx timeout [ 84.930022][ T5866] Bluetooth: hci2: command tx timeout [ 85.005798][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.011188][ T5866] Bluetooth: hci3: command tx timeout [ 85.037089][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.055453][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.061460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 85.066332][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.071390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 85.107187][ T5866] Bluetooth: hci4: command tx timeout [ 85.181375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.190106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.196793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.245361][ T5952] usb 4-1: USB disconnect, device number 2 [ 85.401630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 85.410767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 85.419754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.472980][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.497376][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.093575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.320580][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.341903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.351704][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.681987][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.599053][ T6017] loop4: detected capacity change from 0 to 512 [ 88.764920][ T6017] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.624766][ T6017] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.891101][ T6017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.165914][ T6027] loop1: detected capacity change from 0 to 128 [ 90.171216][ T6017] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.12: bad orphan inode 131083 [ 90.468454][ T6017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.638459][ T6017] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 90.702023][ T6033] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 90.803657][ T6033] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/2/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.126746][ T6040] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.12: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 91.552618][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.749074][ T9] cfg80211: failed to load regulatory.db [ 93.533650][ T6053] tipc: Started in network mode [ 93.538604][ T6053] tipc: Node identity 6aabb8f56777, cluster identity 4711 [ 93.577672][ T6053] tipc: Enabled bearer , priority 0 [ 93.655976][ T6058] syzkaller0: entered promiscuous mode [ 93.689442][ T6058] syzkaller0: entered allmulticast mode [ 94.622558][ T6053] tipc: Resetting bearer [ 94.637380][ T6052] tipc: Resetting bearer [ 94.748980][ T6052] tipc: Disabling bearer [ 94.922713][ T6069] program syz.4.24 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.936372][ T6069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.992526][ T9] tipc: Node number set to 232569077 [ 99.007790][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.015681][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.046286][ T5935] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.098808][ T6096] loop4: detected capacity change from 0 to 128 [ 99.169846][ T6096] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.183413][ T6096] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.282700][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 99.444377][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.712906][ T5935] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 99.730006][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.751694][ T5935] usb 1-1: Product: syz [ 99.757388][ T5935] usb 1-1: Manufacturer: syz [ 99.766123][ T5935] usb 1-1: SerialNumber: syz [ 99.792273][ T5935] usb 1-1: config 0 descriptor?? [ 99.799714][ T5935] gs_usb 1-1:0.0: Required endpoints not found [ 99.923860][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.948264][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.975124][ T5867] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.334074][ T6106] loop0: detected capacity change from 0 to 2048 [ 100.796777][ T6106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.135729][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.381445][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391790][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.400809][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.971213][ T5971] usb 1-1: USB disconnect, device number 2 [ 104.580465][ T6127] loop2: detected capacity change from 0 to 512 [ 104.829342][ T6129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.847203][ T6127] EXT4-fs: inline encryption not supported [ 105.123112][ T6127] EXT4-fs: Ignoring removed nobh option [ 105.294201][ T6127] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 105.331096][ T6127] EXT4-fs (loop2): DAX unsupported by block device. [ 105.447729][ T6135] loop1: detected capacity change from 0 to 512 [ 105.459675][ T6135] ext4: Unknown parameter 'fscontext' [ 107.098385][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 108.706430][ T6157] loop2: detected capacity change from 0 to 1024 [ 109.512535][ T6157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.546062][ T6169] loop4: detected capacity change from 0 to 32768 [ 110.590945][ T6169] Only 4K block size supported! [ 110.596680][ T6169] Mount JFS Failure: -22 [ 110.600920][ T6169] jfs_mount failed w/return code = -22 [ 110.672953][ T6168] loop3: detected capacity change from 0 to 16 [ 110.692328][ T6168] erofs: Unknown parameter '*' [ 112.006100][ T5876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.034869][ T6212] loop3: detected capacity change from 0 to 2048 [ 118.311855][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 118.618122][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.873095][ T6225] bridge0: port 3(syz_tun) entered blocking state [ 119.362840][ T5866] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.403806][ T5863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.433960][ T6225] bridge0: port 3(syz_tun) entered disabled state [ 119.489416][ T6225] syz_tun: entered allmulticast mode [ 119.577575][ T6225] syz_tun: entered promiscuous mode [ 120.112465][ T6225] bridge0: port 3(syz_tun) entered blocking state [ 120.119273][ T6225] bridge0: port 3(syz_tun) entered forwarding state [ 120.506789][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 120.529091][ T6241] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 120.545798][ T1151] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.779348][ T6239] ================================================================== [ 120.787453][ T6239] BUG: KASAN: wild-memory-access in __sha512_update+0x10d/0x1d0 [ 120.795098][ T6239] Read of size 2 at addr 0005088000000000 by task syz.3.64/6239 [ 120.802717][ T6239] [ 120.805040][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 120.805055][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.805070][ T6239] Call Trace: [ 120.805075][ T6239] [ 120.805081][ T6239] dump_stack_lvl+0x189/0x250 [ 120.805101][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.805117][ T6239] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 120.805138][ T6239] ? __virt_addr_valid+0x7c/0x5c0 [ 120.805156][ T6239] ? __sha512_update+0x10d/0x1d0 [ 120.805173][ T6239] kasan_report+0x118/0x150 [ 120.805193][ T6239] ? __sha512_update+0x10d/0x1d0 [ 120.805211][ T6239] ? __sha512_update+0x10d/0x1d0 [ 120.805227][ T6239] kasan_check_range+0x2b0/0x2c0 [ 120.805246][ T6239] ? __sha512_update+0x10d/0x1d0 [ 120.805264][ T6239] __asan_memcpy+0x29/0x70 [ 120.805279][ T6239] __sha512_update+0x10d/0x1d0 [ 120.805297][ T6239] crypto_sha512_update+0x27/0x40 [ 120.805311][ T6239] shash_ahash_update+0x213/0x2f0 [ 120.805329][ T6239] hash_sendmsg+0x96b/0x11d0 [ 120.805354][ T6239] ? __pfx_hash_sendmsg+0x10/0x10 [ 120.805371][ T6239] __sock_sendmsg+0x21c/0x270 [ 120.805391][ T6239] ____sys_sendmsg+0x52d/0x830 [ 120.805408][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.805426][ T6239] ? import_iovec+0x74/0xa0 [ 120.805444][ T6239] ___sys_sendmsg+0x21f/0x2a0 [ 120.805459][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.805486][ T6239] ? __fget_files+0x2a/0x420 [ 120.805505][ T6239] ? __fget_files+0x3a0/0x420 [ 120.805526][ T6239] __sys_sendmmsg+0x227/0x430 [ 120.805543][ T6239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.805561][ T6239] ? __pfx_do_futex+0x10/0x10 [ 120.805606][ T6239] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.805622][ T6239] do_syscall_64+0xfa/0xfa0 [ 120.805635][ T6239] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.805648][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.805662][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 120.805677][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.805691][ T6239] RIP: 0033:0x7f609ef8ebe9 [ 120.805707][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.805719][ T6239] RSP: 002b:00007f609fe90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.805734][ T6239] RAX: ffffffffffffffda RBX: 00007f609f1c6090 RCX: 00007f609ef8ebe9 [ 120.805745][ T6239] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 120.805754][ T6239] RBP: 00007f609f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 120.805763][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.805771][ T6239] R13: 00007f609f1c6128 R14: 00007f609f1c6090 R15: 00007ffec97f6118 [ 120.805798][ T6239] [ 120.805803][ T6239] ================================================================== [ 121.559638][ T6239] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.566959][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 121.576059][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.586111][ T6239] Call Trace: [ 121.589384][ T6239] [ 121.592306][ T6239] dump_stack_lvl+0x99/0x250 [ 121.596894][ T6239] ? __asan_memcpy+0x40/0x70 [ 121.601480][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.606668][ T6239] ? __pfx__printk+0x10/0x10 [ 121.611262][ T6239] vpanic+0x237/0x6d0 [ 121.615261][ T6239] ? __pfx_vpanic+0x10/0x10 [ 121.619797][ T6239] ? preempt_schedule_common+0x83/0xd0 [ 121.625261][ T6239] ? preempt_schedule+0xae/0xc0 [ 121.630112][ T6239] panic+0xb9/0xc0 [ 121.633837][ T6239] ? __pfx_panic+0x10/0x10 [ 121.638263][ T6239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.644587][ T6239] ? __sha512_update+0x10d/0x1d0 [ 121.649520][ T6239] check_panic_on_warn+0x89/0xb0 [ 121.654464][ T6239] ? __sha512_update+0x10d/0x1d0 [ 121.659403][ T6239] end_report+0x78/0x160 [ 121.663651][ T6239] kasan_report+0x129/0x150 [ 121.668174][ T6239] ? __sha512_update+0x10d/0x1d0 [ 121.673126][ T6239] ? __sha512_update+0x10d/0x1d0 [ 121.678063][ T6239] kasan_check_range+0x2b0/0x2c0 [ 121.683012][ T6239] ? __sha512_update+0x10d/0x1d0 [ 121.687945][ T6239] __asan_memcpy+0x29/0x70 [ 121.692356][ T6239] __sha512_update+0x10d/0x1d0 [ 121.697117][ T6239] crypto_sha512_update+0x27/0x40 [ 121.702138][ T6239] shash_ahash_update+0x213/0x2f0 [ 121.707158][ T6239] hash_sendmsg+0x96b/0x11d0 [ 121.711765][ T6239] ? __pfx_hash_sendmsg+0x10/0x10 [ 121.716806][ T6239] __sock_sendmsg+0x21c/0x270 [ 121.721511][ T6239] ____sys_sendmsg+0x52d/0x830 [ 121.726291][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.731609][ T6239] ? import_iovec+0x74/0xa0 [ 121.736146][ T6239] ___sys_sendmsg+0x21f/0x2a0 [ 121.740856][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.746098][ T6239] ? __fget_files+0x2a/0x420 [ 121.750718][ T6239] ? __fget_files+0x3a0/0x420 [ 121.755436][ T6239] __sys_sendmmsg+0x227/0x430 [ 121.760134][ T6239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.765369][ T6239] ? __pfx_do_futex+0x10/0x10 [ 121.770085][ T6239] __x64_sys_sendmmsg+0xa0/0xc0 [ 121.774959][ T6239] do_syscall_64+0xfa/0xfa0 [ 121.779478][ T6239] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.784688][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.790775][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 121.795480][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.801388][ T6239] RIP: 0033:0x7f609ef8ebe9 [ 121.805816][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.825440][ T6239] RSP: 002b:00007f609fe90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.833882][ T6239] RAX: ffffffffffffffda RBX: 00007f609f1c6090 RCX: 00007f609ef8ebe9 [ 121.841874][ T6239] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 121.849870][ T6239] RBP: 00007f609f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 121.857856][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.865827][ T6239] R13: 00007f609f1c6128 R14: 00007f609f1c6090 R15: 00007ffec97f6118 [ 121.873794][ T6239] [ 121.877147][ T6239] Kernel Offset: disabled [ 121.881476][ T6239] Rebooting in 86400 seconds..