last executing test programs: 11.417194738s ago: executing program 3 (id=16): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) 8.117416177s ago: executing program 2 (id=17): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) 7.787870336s ago: executing program 0 (id=18): socket$netlink(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) socket(0x2, 0x80805, 0x0) 7.139244457s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f00000006c0), 0x0, 0x44, 0x0) 7.043947124s ago: executing program 1 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) 6.925067195s ago: executing program 0 (id=22): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x7]}, &(0x7f0000000080), 0x8) 6.923847679s ago: executing program 1 (id=23): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x2, 0x9, 0x6}) 6.800972308s ago: executing program 0 (id=24): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.530201554s ago: executing program 2 (id=25): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) syz_clone(0x20006000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x1b60) 6.444127098s ago: executing program 3 (id=26): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.065914727s ago: executing program 1 (id=27): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.936631499s ago: executing program 3 (id=28): r0 = getpgrp(0x0) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x5, 0x1000, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0x1}, {0x2000000000000007}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10002000005) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_CLEAR_SOCK(r3, 0xab3f) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a400)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) 5.92622579s ago: executing program 2 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f00000006c0), 0x0, 0x44, 0x0) 5.735039058s ago: executing program 0 (id=30): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) semget$private(0x0, 0xc, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0x2, [0x0, 0x3, 0x200, 0x4, 0x3195, 0x401, 0x3, 0xb51c, 0x8001, 0x31, 0x6, 0x6, 0x5, 0x6, 0x7ff, 0x8, 0x2, 0x9, 0x8413, 0x2, 0x402, 0x6, 0x6, 0x7f, 0x4, 0x8, 0x0, 0x4af, 0x3f0, 0x309, 0x317, 0xf000, 0xb71, 0x6, 0x8001, 0x4, 0x905, 0x2, 0xe5e7, 0x7, 0xae, 0xb0ae, 0x2, 0x3, 0x7, 0x1ff, 0x7, 0x6], 0x7}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 2.828371197s ago: executing program 0 (id=31): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011fffe"], 0x36) 2.752305421s ago: executing program 2 (id=32): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) 2.669962059s ago: executing program 3 (id=33): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) 2.404570502s ago: executing program 2 (id=34): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) 1.997758898s ago: executing program 1 (id=35): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a7", 0x48}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680", 0xd1}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.291973439s ago: executing program 2 (id=36): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 841.140389ms ago: executing program 3 (id=37): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x2, 0x9, 0x6}) 373.057067ms ago: executing program 1 (id=38): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, 0x0, 0x0) 135.709483ms ago: executing program 3 (id=39): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 0s ago: executing program 0 (id=40): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) semget$private(0x0, 0xc, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 73.132374][ T5595] cgroup: Unknown subsys name 'net' [ 73.364179][ T5595] cgroup: Unknown subsys name 'cpuset' [ 73.439296][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.126334][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.393531][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.416478][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.422326][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.440344][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.460901][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.468982][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.470283][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.481421][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.483085][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.484239][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.586072][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.606458][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.622113][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.633199][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.649511][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.652044][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.653393][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.657931][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.659604][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.661293][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.551006][ T5611] Bluetooth: hci1: command tx timeout [ 81.551187][ T5616] Bluetooth: hci0: command tx timeout [ 81.659048][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.659239][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.659419][ T5609] bridge_slave_0: entered allmulticast mode [ 81.662971][ T5609] bridge_slave_0: entered promiscuous mode [ 81.666952][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.667230][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.667491][ T5607] bridge_slave_0: entered allmulticast mode [ 81.672042][ T5607] bridge_slave_0: entered promiscuous mode [ 81.710695][ T5616] Bluetooth: hci3: command tx timeout [ 81.736959][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.737126][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.737312][ T5609] bridge_slave_1: entered allmulticast mode [ 81.764981][ T5609] bridge_slave_1: entered promiscuous mode [ 81.767384][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.767588][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.772478][ T5607] bridge_slave_1: entered allmulticast mode [ 81.775439][ T5607] bridge_slave_1: entered promiscuous mode [ 81.777571][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.777859][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.778089][ T5606] bridge_slave_0: entered allmulticast mode [ 81.782409][ T5606] bridge_slave_0: entered promiscuous mode [ 81.785317][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.785591][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.785830][ T5608] bridge_slave_0: entered allmulticast mode [ 81.791868][ T5616] Bluetooth: hci2: command tx timeout [ 81.796056][ T5608] bridge_slave_0: entered promiscuous mode [ 81.888985][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.889248][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.889515][ T5606] bridge_slave_1: entered allmulticast mode [ 81.896715][ T5606] bridge_slave_1: entered promiscuous mode [ 81.898232][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.900636][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.900925][ T5608] bridge_slave_1: entered allmulticast mode [ 81.904042][ T5608] bridge_slave_1: entered promiscuous mode [ 82.021514][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.043536][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.113889][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.120015][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.133179][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.146449][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.311526][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.314632][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.384387][ T5609] team0: Port device team_slave_0 added [ 82.387255][ T5607] team0: Port device team_slave_0 added [ 82.427660][ T5609] team0: Port device team_slave_1 added [ 82.432236][ T5607] team0: Port device team_slave_1 added [ 82.436536][ T5606] team0: Port device team_slave_0 added [ 82.443060][ T5608] team0: Port device team_slave_0 added [ 82.484400][ T5606] team0: Port device team_slave_1 added [ 82.487122][ T5608] team0: Port device team_slave_1 added [ 82.566289][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.566300][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.566315][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.570490][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.570503][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.570523][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.631314][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.631330][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.631352][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.635916][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.635931][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.635956][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.638426][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.638439][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.638462][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.652267][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.652283][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.652306][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.686147][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.686163][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.686187][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.693202][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.693216][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.693240][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.911379][ T5609] hsr_slave_0: entered promiscuous mode [ 82.913557][ T5609] hsr_slave_1: entered promiscuous mode [ 82.929198][ T5607] hsr_slave_0: entered promiscuous mode [ 82.931200][ T5607] hsr_slave_1: entered promiscuous mode [ 82.932986][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 82.933083][ T5607] Cannot create hsr debugfs directory [ 82.988028][ T5606] hsr_slave_0: entered promiscuous mode [ 82.990309][ T5606] hsr_slave_1: entered promiscuous mode [ 82.991887][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 82.991911][ T5606] Cannot create hsr debugfs directory [ 83.026369][ T5608] hsr_slave_0: entered promiscuous mode [ 83.027674][ T5608] hsr_slave_1: entered promiscuous mode [ 83.029300][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 83.029325][ T5608] Cannot create hsr debugfs directory [ 83.629165][ T5611] Bluetooth: hci1: command tx timeout [ 83.629253][ T5616] Bluetooth: hci0: command tx timeout [ 83.788836][ T5616] Bluetooth: hci3: command tx timeout [ 83.881390][ T5616] Bluetooth: hci2: command tx timeout [ 84.130072][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.172164][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.183534][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.227665][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.241806][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.285159][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.308320][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.343356][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.452888][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.483885][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.503964][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.534370][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.544859][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.575253][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.605510][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.635188][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.823011][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.864028][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.881484][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.930682][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.934154][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.962990][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.995436][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.025361][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.204055][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.246999][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.256098][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.284091][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.296860][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.323699][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.334261][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.366409][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.426215][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.546279][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.571913][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.601012][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.601298][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.661137][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.661230][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.709130][ T5611] Bluetooth: hci1: command tx timeout [ 85.709223][ T5616] Bluetooth: hci0: command tx timeout [ 85.773048][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.825443][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.825598][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.860023][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.865698][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.865843][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.868922][ T5616] Bluetooth: hci3: command tx timeout [ 85.961945][ T5616] Bluetooth: hci2: command tx timeout [ 86.023559][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.083276][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.083866][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.125830][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.183227][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.183385][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.316018][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.438979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.439110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.540028][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.540256][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.064958][ T9] cfg80211: failed to load regulatory.db [ 87.082662][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.480486][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.627504][ T5609] veth0_vlan: entered promiscuous mode [ 87.703289][ T5609] veth1_vlan: entered promiscuous mode [ 87.788875][ T5611] Bluetooth: hci1: command tx timeout [ 87.788922][ T5616] Bluetooth: hci0: command tx timeout [ 87.863444][ T5606] veth0_vlan: entered promiscuous mode [ 87.904245][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.948814][ T5616] Bluetooth: hci3: command tx timeout [ 87.992382][ T5606] veth1_vlan: entered promiscuous mode [ 88.034066][ T5616] Bluetooth: hci2: command tx timeout [ 88.067729][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.084079][ T5609] veth0_macvtap: entered promiscuous mode [ 88.117999][ T5609] veth1_macvtap: entered promiscuous mode [ 88.231684][ T5608] veth0_vlan: entered promiscuous mode [ 88.234861][ T5606] veth0_macvtap: entered promiscuous mode [ 88.246811][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.276055][ T5606] veth1_macvtap: entered promiscuous mode [ 88.297211][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.321456][ T5608] veth1_vlan: entered promiscuous mode [ 88.346576][ T2854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.359914][ T2854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.379949][ T2854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380182][ T5607] veth0_vlan: entered promiscuous mode [ 88.400047][ T2854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.419881][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.486141][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.507904][ T5607] veth1_vlan: entered promiscuous mode [ 88.629168][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.654086][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.715775][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.801446][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.975419][ T5608] veth0_macvtap: entered promiscuous mode [ 89.052064][ T5608] veth1_macvtap: entered promiscuous mode [ 89.100244][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.100264][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.263450][ T5607] veth0_macvtap: entered promiscuous mode [ 89.313103][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.325940][ T5607] veth1_macvtap: entered promiscuous mode [ 89.371904][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.393156][ T1549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.393184][ T1549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.428134][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.444627][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.492754][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.505579][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.536915][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.544770][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.544789][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.647620][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.817746][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.889512][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.901461][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.901482][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.921625][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953504][ T2854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407976][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.407995][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.872133][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.872152][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.995631][ T825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.995652][ T825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.382087][ T1549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.382106][ T1549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.421867][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.867589][ T5770] block device autoloading is deprecated and will be removed. [ 94.472450][ T5802] Zero length message leads to an empty skb [ 95.648642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.678645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.688643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.728648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.758646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.768644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.778644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.788658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.938643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.948644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.213065][ T37] audit: type=1326 audit(1782147838.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.226842][ T37] audit: type=1326 audit(1782147838.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.278081][ T5811] binder: 5804:5811 ioctl 4018620d 0 returned -22 [ 98.280410][ T37] audit: type=1326 audit(1782147838.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.280457][ T37] audit: type=1326 audit(1782147838.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.280495][ T37] audit: type=1326 audit(1782147838.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.280532][ T37] audit: type=1326 audit(1782147838.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.286441][ T37] audit: type=1326 audit(1782147838.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.286493][ T37] audit: type=1326 audit(1782147838.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.286547][ T37] audit: type=1326 audit(1782147838.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 98.286585][ T37] audit: type=1326 audit(1782147838.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8289fce59 code=0x7ffc0000 [ 104.959702][ T5871] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 107.135175][ T5862] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 107.135196][ T5862] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 107.135219][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 107.135238][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.135247][ T5862] RIP: 0010:__schedule+0x4030/0x5550 [ 107.135270][ T5862] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 107.135283][ T5862] RSP: 0018:ffffc9000612f420 EFLAGS: 00010003 [ 107.135298][ T5862] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 107.135309][ T5862] RDX: 0000000000000003 RSI: ffffc9000612f5a0 RDI: ffff8880b863c918 [ 107.135321][ T5862] RBP: ffffc9000612f608 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 107.135333][ T5862] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 107.135345][ T5862] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 107.135356][ T5862] FS: 00007f69af2366c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 107.135370][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.135381][ T5862] CR2: 00007ffd9ca2eff8 CR3: 0000000033424000 CR4: 00000000003526f0 [ 107.135395][ T5862] Call Trace: [ 107.135405][ T5862] [ 107.135419][ T5862] ? __pfx___irq_work_queue_local+0x10/0x10 [ 107.135441][ T5862] ? __pfx___schedule+0x10/0x10 [ 107.135458][ T5862] ? irq_work_queue_on+0x4c0/0x670 [ 107.135480][ T5862] preempt_schedule_irq+0x4d/0xa0 [ 107.135498][ T5862] irqentry_exit+0x14f/0x8c0 [ 107.135517][ T5862] ? trace_irq_disable+0x3b/0x140 [ 107.135537][ T5862] asm_sysvec_irq_work+0x1a/0x20 [ 107.135554][ T5862] RIP: 0010:__local_bh_enable_ip+0x1c2/0x2b0 [ 107.135577][ T5862] Code: f7 89 df e8 60 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 d2 c9 45 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 66 fe [ 107.135590][ T5862] RSP: 0018:ffffc9000612f730 EFLAGS: 00000206 [ 107.135602][ T5862] RAX: 0000000000000002 RBX: ffff8880587bed08 RCX: 0000000000000046 [ 107.135613][ T5862] RDX: 0000000000000000 RSI: ffffffff8d978313 RDI: ffffffff8bcc4d80 [ 107.135624][ T5862] RBP: 1ffff1100635193e R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 107.135636][ T5862] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 0000000000000286 [ 107.135648][ T5862] R13: dffffc0000000000 R14: ffff888031a8c9f4 R15: 0000000000000001 [ 107.135673][ T5862] j1939_sk_sendmsg+0x10de/0x1350 [ 107.135700][ T5862] ? j1939_sk_sendmsg+0x51a/0x1350 [ 107.135727][ T5862] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 107.135750][ T5862] ? count_memcg_event_mm+0x21/0x260 [ 107.135774][ T5862] ? aa_sock_msg_perm+0x122/0x200 [ 107.135790][ T5862] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 107.135811][ T5862] sock_sendmsg_nosec+0x13a/0x180 [ 107.135844][ T5862] ____sys_sendmsg+0x55c/0x870 [ 107.135874][ T5862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.135902][ T5862] ? import_iovec+0x73/0xa0 [ 107.135915][ T5862] ___sys_sendmsg+0x2a5/0x360 [ 107.135929][ T5862] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.135941][ T5862] ? __lock_acquire+0x6b5/0x2d10 [ 107.135963][ T5862] __sys_sendmmsg+0x279/0x4d0 [ 107.135977][ T5862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.135988][ T5862] ? do_futex+0x43d/0x4f0 [ 107.136006][ T5862] ? __sys_connect+0x39f/0x450 [ 107.136019][ T5862] ? __pfx___se_sys_futex+0x10/0x10 [ 107.136033][ T5862] ? rcu_is_watching+0x15/0xb0 [ 107.136049][ T5862] __x64_sys_sendmmsg+0xa0/0xc0 [ 107.136061][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.136072][ T5862] do_syscall_64+0x174/0x580 [ 107.136084][ T5862] ? trace_irq_disable+0x3b/0x140 [ 107.136096][ T5862] ? clear_bhb_loop+0x40/0x90 [ 107.136107][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.136117][ T5862] RIP: 0033:0x7f69b0fdce59 [ 107.136131][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.136139][ T5862] RSP: 002b:00007f69af236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.136150][ T5862] RAX: ffffffffffffffda RBX: 00007f69b1255fa0 RCX: 00007f69b0fdce59 [ 107.136166][ T5862] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000004 [ 107.136173][ T5862] RBP: 00007f69b1072e6f R08: 0000000000000000 R09: 0000000000000000 [ 107.136180][ T5862] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 107.136186][ T5862] R13: 00007f69b1256038 R14: 00007f69b1255fa0 R15: 00007fffd0106a28 [ 107.136201][ T5862] [ 107.136205][ T5862] Modules linked in: [ 107.136216][ T5862] ---[ end trace 0000000000000000 ]--- [ 107.136227][ T5862] RIP: 0010:__schedule+0x4030/0x5550 [ 107.136239][ T5862] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 107.136248][ T5862] RSP: 0018:ffffc9000612f420 EFLAGS: 00010003 [ 107.136256][ T5862] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 107.136264][ T5862] RDX: 0000000000000003 RSI: ffffc9000612f5a0 RDI: ffff8880b863c918 [ 107.136270][ T5862] RBP: ffffc9000612f608 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 107.136278][ T5862] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 107.136285][ T5862] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 107.136296][ T5862] FS: 00007f69af2366c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 107.136306][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.136313][ T5862] CR2: 00007ffd9ca2eff8 CR3: 0000000033424000 CR4: 00000000003526f0 [ 107.136324][ T5862] Kernel panic - not syncing: Fatal exception [ 108.218542][ T5862] Shutting down cpus with NMI [ 108.218881][ T5862] Kernel Offset: disabled