[ 94.858495] audit: type=1800 audit(1552565563.909:25): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 94.877780] audit: type=1800 audit(1552565563.919:26): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 94.897267] audit: type=1800 audit(1552565563.929:27): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. 2019/03/14 12:12:58 fuzzer started 2019/03/14 12:13:04 dialing manager at 10.128.0.26:45521 2019/03/14 12:13:04 syscalls: 1 2019/03/14 12:13:04 code coverage: enabled 2019/03/14 12:13:04 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/14 12:13:04 extra coverage: extra coverage is not supported by the kernel 2019/03/14 12:13:04 setuid sandbox: enabled 2019/03/14 12:13:04 namespace sandbox: enabled 2019/03/14 12:13:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/14 12:13:04 fault injection: enabled 2019/03/14 12:13:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/14 12:13:04 net packet injection: enabled 2019/03/14 12:13:04 net device setup: enabled 12:16:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x2, 0x0) syzkaller login: [ 315.604162] IPVS: ftp: loaded support on port[0] = 21 [ 315.762230] chnl_net:caif_netlink_parms(): no params data found [ 315.837534] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.844280] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.852888] device bridge_slave_0 entered promiscuous mode [ 315.862838] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.869378] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.877951] device bridge_slave_1 entered promiscuous mode [ 315.912255] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 315.923893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 315.958859] team0: Port device team_slave_0 added [ 315.967883] team0: Port device team_slave_1 added [ 316.037496] device hsr_slave_0 entered promiscuous mode [ 316.192679] device hsr_slave_1 entered promiscuous mode [ 316.373294] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.379885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.387190] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.393825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.476951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.503275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.523632] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.535060] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.553063] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 316.572816] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.594572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.603417] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.609949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.617933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.626313] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.633026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.680838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.690817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.708783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.718234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.727008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.735783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.770137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.788066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.795965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:16:26 executing program 0: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xfffffffffffffffb, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000002700), 0x57b, 0xffe4) 12:16:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r0, 0x1267) 12:16:26 executing program 0: mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) 12:16:26 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x1200, 0x0) 12:16:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:16:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:16:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0xa00000000, 0x8, 0x0, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaac41, 0x0, 0x0, 0x181) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 317.635585] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 317.677419] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 317.730774] kvm: pic: level sensitive irq not supported [ 317.737134] kvm: pic: single mode not supported [ 317.746605] kvm: pic: single mode not supported [ 317.755327] kvm: pic: level sensitive irq not supported [ 317.763533] kvm: pic: level sensitive irq not supported [ 317.771336] kvm: pic: level sensitive irq not supported [ 317.783498] kvm: pic: single mode not supported [ 317.789173] kvm: pic: level sensitive irq not supported [ 317.798132] kvm: pic: single mode not supported [ 317.808182] kvm: pic: single mode not supported 12:16:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0xa00000000, 0x8, 0x0, r2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaac41, 0x0, 0x0, 0x181) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 317.813249] kvm: pic: level sensitive irq not supported [ 318.005478] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 318.059622] kvm: pic: single mode not supported [ 318.059638] kvm: pic: level sensitive irq not supported [ 318.070432] kvm: pic: single mode not supported [ 318.078904] kvm: pic: level sensitive irq not supported [ 318.090874] kvm: pic: level sensitive irq not supported [ 318.116669] kvm: pic: level sensitive irq not supported 12:16:27 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x1003b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) listen(r0, 0xbc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@fragment, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x3b, &(0x7f0000000100)=""/141, &(0x7f00000001c0)=0xffffffffffffff84) 12:16:27 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f000003cff6)='./control\x00', 0x220001a1) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) read(r0, &(0x7f0000058fef)=""/32, 0x1ef) 12:16:28 executing program 1: r0 = msgget$private(0x0, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = getuid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r7 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0xfff, r1, r2, r3, r5}, 0x20d8, 0x0, 0xc5, 0x80, 0x0, 0x7ff, r6, r7}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r8 = getpid() r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x4280, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x9, 0x5, 0x16, 0x3}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000440)={r10, 0x9, 0x30, 0xfffffffffffffa92, 0x4}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000004c0)={0xa906, 0x1, 0x3, 0x400}, 0x8) setsockopt$inet_mreqsrc(r9, 0x0, 0x26, &(0x7f0000000500)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000540)={r11, 0x5}, &(0x7f0000000580)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000005c0)={r9, r9}) setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f0000000600)=0x9, 0x4) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000640)={{0x5, r1, r2, r4, r2, 0x0, 0x200}, 0x401, 0x9, 0xfffffffffffffffc, 0x0, 0x2a0b000, 0x40, r6, r8}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000006c0)={r12, @in6={{0xa, 0x4e24, 0x4, @local, 0x100000000}}, 0x0, 0x1fe, 0x120, 0x10001, 0x10}, 0x98) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f00000007c0)=@get={0x1, &(0x7f0000000780)=""/8, 0x2}) fanotify_init(0x0, 0x101002) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000800)={r11, 0x80000000, 0xfffffffffffffff9, 0x7ff, 0x5, 0x10000}, &(0x7f0000000840)=0x14) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, &(0x7f0000000880)) getsockopt$inet_tcp_buf(r9, 0x6, 0xd, &(0x7f00000008c0)=""/197, &(0x7f00000009c0)=0xc5) getsockopt$inet_dccp_buf(r9, 0x21, 0xe, &(0x7f0000000a00)=""/111, &(0x7f0000000a80)=0x6f) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000b00)={r11, 0x2c, &(0x7f0000000ac0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0x7f}]}, &(0x7f0000000b40)=0x10) write$P9_RVERSION(r9, &(0x7f0000000b80)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) lstat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000c80)={r13, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x7b}, 0x90) 12:16:28 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6108000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r2, 0x300, 0x70bd2a, 0x7, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x40}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8040, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x2, 0x5cad, 0x0, {0xc, @sdr={0x7276575f, 0x9}}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) 12:16:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x100, 0x202) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24002000310029080000000000000002040000000f00000014000100ffffbfff000000000000000000000001da3cb00f80c0f30f816a0800000000000000ed85498604040a21d82739d87c66fb9cff486d0e416475f15acc689ec24cf17fa4c3d5c32a843366cf1926fd2f6b6599e663d993f97aff3208f803e560976f6402b3d4dfbdb438f51361ca1aa9"], 0x2c}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x64080, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) syz_open_pts(r2, 0x400) 12:16:28 executing program 0: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0xa2000000) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x40000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) [ 318.124436] kvm: pic: single mode not supported [ 319.770792] IPVS: ftp: loaded support on port[0] = 21 12:16:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xd0a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9ce, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012161, 0x0) [ 319.917992] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:16:29 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80000, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @remote}, 0x140, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='teql0\x00', 0xfd, 0x2, 0x9}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fchmod(r1, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="870d0000f00af2ab630000000004ffff0551ceb0010000008e57591e06f56a1fb921e4ef3510af34210f584307f4122facdb5325bbe90185dadf4a4cca764025be582c0df11b9ddc7cc39cb677959a71db0d0ce0a1c8df07f3d5b6eff38b9743fe08f105020c"], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x7, @mcast2}], 0x2c) [ 320.034011] chnl_net:caif_netlink_parms(): no params data found [ 320.153772] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.160331] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.168979] device bridge_slave_0 entered promiscuous mode [ 320.193091] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.199732] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.208242] device bridge_slave_1 entered promiscuous mode [ 320.249753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 320.264056] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 320.299959] team0: Port device team_slave_0 added [ 320.308975] team0: Port device team_slave_1 added [ 320.497339] device hsr_slave_0 entered promiscuous mode [ 320.533770] device hsr_slave_1 entered promiscuous mode [ 320.786745] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.793409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.800599] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.807287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.907139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.931539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.943819] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.955327] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.968144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 320.993035] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.015695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.025398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.033752] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.040259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.098816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.108808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.124098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.132747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.141198] bridge0: port 2(bridge_slave_1) entered blocking state 12:16:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmdt(r2) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5, 0x8ab, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ba0ab2987139498828fe76f382f8a43c10137c5456d1f8bafbf6f8d0c2c6b06adafb9b1bb701ce7bedfdb0c75b51a7bafe25a132fa7dee888ff25aeaf48d222a"}}, 0x80}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x2000) [ 321.147771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.157081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.166234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.175339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.184307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.193016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.202189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.210902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.219451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.228249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.236808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.249289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.257655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:16:30 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xb0, 0xffffffff, 0x0, 0x0, 0xfffffffffffffff9, 0x6, 0x3, 0x62a, 0xcacc, 0xffffffff, 0xcf1, 0x6, 0x80000001, 0x100000001, 0x3, 0x2}}) accept4(r0, &(0x7f0000000280)=@x25, &(0x7f0000000180)=0xfe2d, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0xc0142) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x53, 0x7, 0x400, {0x2, 0xfff}, {0x182, 0x3}, @cond=[{0x4, 0x4, 0x7, 0x0, 0x6, 0x5b1}, {0xfffffffffffff0f2, 0x8, 0x1f2, 0x64a6, 0xe1ec, 0x5db}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @loopback}], 0x1c) [ 321.320911] 8021q: adding VLAN 0 to HW filter on device batadv0 12:16:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4000004e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x2ec, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x1ec) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendto(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) 12:16:30 executing program 1: r0 = msgget$private(0x0, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = getuid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r7 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0xfff, r1, r2, r3, r5}, 0x20d8, 0x0, 0xc5, 0x80, 0x0, 0x7ff, r6, r7}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r8 = getpid() r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x4280, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x9, 0x5, 0x16, 0x3}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000440)={r10, 0x9, 0x30, 0xfffffffffffffa92, 0x4}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000004c0)={0xa906, 0x1, 0x3, 0x400}, 0x8) setsockopt$inet_mreqsrc(r9, 0x0, 0x26, &(0x7f0000000500)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000540)={r11, 0x5}, &(0x7f0000000580)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000005c0)={r9, r9}) setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f0000000600)=0x9, 0x4) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000640)={{0x5, r1, r2, r4, r2, 0x0, 0x200}, 0x401, 0x9, 0xfffffffffffffffc, 0x0, 0x2a0b000, 0x40, r6, r8}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000006c0)={r12, @in6={{0xa, 0x4e24, 0x4, @local, 0x100000000}}, 0x0, 0x1fe, 0x120, 0x10001, 0x10}, 0x98) ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f00000007c0)=@get={0x1, &(0x7f0000000780)=""/8, 0x2}) fanotify_init(0x0, 0x101002) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000800)={r11, 0x80000000, 0xfffffffffffffff9, 0x7ff, 0x5, 0x10000}, &(0x7f0000000840)=0x14) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, &(0x7f0000000880)) getsockopt$inet_tcp_buf(r9, 0x6, 0xd, &(0x7f00000008c0)=""/197, &(0x7f00000009c0)=0xc5) getsockopt$inet_dccp_buf(r9, 0x21, 0xe, &(0x7f0000000a00)=""/111, &(0x7f0000000a80)=0x6f) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000b00)={r11, 0x2c, &(0x7f0000000ac0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0x7f}]}, &(0x7f0000000b40)=0x10) write$P9_RVERSION(r9, &(0x7f0000000b80)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) lstat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000c80)={r13, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x7b}, 0x90) 12:16:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0xa}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @local}, &(0x7f0000000480)=0xc) r5 = syz_open_dev$admmidi(&(0x7f00000005c0)='/dev/admmidi#\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newlink={0x178, 0x10, 0x408, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4000, 0x8}, [@IFLA_AF_SPEC={0x14, 0x1a, [{0x4, 0x7}, {0x4, 0xa}, {0x4, 0x1f}, {0x4, 0xa}]}, @IFLA_XDP={0x110, 0x2b, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x4c, 0x1, {0x1e, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0x54, &(0x7f0000000380)=""/84, 0x40f00, 0x1, [], r4, 0x3}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x4c, 0x1, {0x16, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0xfffffffffffffff8, 0x100, 0x100000000, 0x4}]}, &(0x7f0000000500)='GPL\x00', 0x70a, 0x63, &(0x7f0000000540)=""/99, 0x41100, 0x1, [], 0x0, 0x6}}, @IFLA_XDP_FD={0x4c, 0x1, {0x3, 0x7, &(0x7f0000000600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @map={0x18, 0xa, 0x1, 0x0, r5}, @jmp={0x5, 0x5, 0xf, 0x1, 0x2, 0xfffffffffffffffe, 0x4}, @call={0x85, 0x0, 0x0, 0x2d}, @exit], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, [], r6, 0x2}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_PROMISCUITY={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_MAP={0x24, 0xe, {0x100000000, 0x0, 0x7, 0x33850b39, 0x7, 0xaf6}}, @IFLA_AF_SPEC={0x4}]}, 0x178}}, 0x1) 12:16:30 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0x1) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1}, 0xc100) writev(r1, &(0x7f0000000180), 0x1000000000000099) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x81c3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3}}, 0x10) 12:16:31 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x2000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r3}, 0xc) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f00000002c0), 0x1000) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000013c0)) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000007ff0)={0x1d, r4}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x2d8, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 12:16:31 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800001, 0x0) unshare(0x203fd) ioctl$int_in(r0, 0x80000000005001, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) 12:16:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xce, &(0x7f0000000040)=""/195, &(0x7f0000000140)=0xc3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x1ff, 0x7ff, 0x10000, 0x2}, {0x400000000000000, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x0, 0x3}]}, 0x10) getsockopt$packet_buf(r0, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f00000004c0)=0x1c7) 12:16:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) 12:16:31 executing program 0: timer_create(0x5, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) accept4$tipc(r0, 0x0, &(0x7f0000000180), 0x80800) clock_gettime(0x0, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f0000000040)=0x100, 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 12:16:31 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x3ff) lstat(0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) 12:16:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x1}, {&(0x7f0000000200)=""/98, 0x1f1}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0x2000079e}], 0x4}}], 0x1, 0x0, 0x0) 12:16:31 executing program 1: unshare(0x28020400) r0 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x200, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1) syncfs(r0) ioctl$FICLONE(r0, 0x40049409, r0) 12:16:31 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x801000800c5011, &(0x7f0000000080)) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x9}}, 0x18) 12:16:32 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='security.selinux'], 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000380)={"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"}) 12:16:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/214) 12:16:32 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) fcntl$setlease(r0, 0x400, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x10) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010005, 0x0) 12:16:32 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000040)=0x80) ioctl$void(r1, 0xc0045c78) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) r2 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00768b18725eda8a6dced59f1100010100002000000059c16d29000020000001000000009b7e77fa5c939d38395d07c3d8"], 0x2c}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 12:16:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x216) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 12:16:33 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x440, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x5, &(0x7f0000501000)=""/95, &(0x7f0000000040)=0x5f) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r4 = socket$inet_udp(0x2, 0x2, 0x0) getdents(r0, &(0x7f00000003c0)=""/83, 0xffffffffffffffb3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e20}}) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) fcntl$setsig(r3, 0xa, 0x35) setfsuid(r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000e6f000)={0xa, 0x2, 0x1000000000000, @mcast2, 0x4}, 0x1f) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x1, @multicast2}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r7, &(0x7f0000000240)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000000440)=@upd={0xf8, 0x12, 0x300, 0x70bd2d, 0x25dfdbfc, {{'ctr-camellia-aesni-avx2\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0xffffffff80000001}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000200)) [ 324.218608] Unknown ioctl -2147200256 [ 324.258060] Unknown ioctl -2147200256 12:16:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$inet(0x2, 0x20000000000a, 0x3ff) sendmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000001000000cad72412c0199bf200"], 0x10}}], 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x480802, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3ff, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 12:16:33 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) fcntl$setlease(r0, 0x400, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x10) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7}, 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010005, 0x0) [ 324.442788] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 12:16:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001440)={0xa, 0x4e22}, 0x1c) arch_prctl$ARCH_GET_FS(0x1003, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x11a, 0x20000005, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) recvfrom$inet6(r3, &(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r1, r3) [ 324.828789] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:16:34 executing program 2: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000040)={0x4}, 0x8, 0x80800) socketpair(0x5, 0x6, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000180)) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000001c0)) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x200, 0x101, {"5bb522f3455d7c8663d6f6b27c40578d"}, 0x3, 0x0, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) openat$cgroup_subtree(r3, &(0x7f0000000400)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x3}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r5, 0x1f, 0xffffffff, 0x53}, 0x10) r6 = openat$cgroup_procs(r3, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000540)="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", 0x1000) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000001540)={0x7, 'syz1\x00'}) readlink(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)=""/51, 0x33) r7 = add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r8 = add_key(&(0x7f00000016c0)='syzkaller\x00', &(0x7f0000001700)={'syz', 0x0}, &(0x7f0000001740)="d6dd42740a6aefd1521c9870cac55f405a114f5391e2a4e7efb9b486e60ae58e0dacfb09d409878d9c9fd4df254b8eaac53b91c5bef546", 0x37, 0xfffffffffffffffd) keyctl$instantiate(0xc, r7, &(0x7f0000001680)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'cgroupkeyring', 0x20, 0x4}, 0x34, r8) r9 = getpgrp(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000001780)={0x0, r9}) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001800)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x41000002}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r10, 0xf08, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000001940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001900), 0x13f, 0x100f}}, 0x20) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000001980)=""/23) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000001a00)={0x4, &(0x7f00000019c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000001b40)={r11, &(0x7f0000001a40)=""/248}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001bc0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r12, 0x100, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 12:16:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x8000001}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x5, {0x0, 0x9, 0xff, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x4, {0x9, 0x92, 0x2, 0x8c7}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r1, r0, 0x0) 12:16:34 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:34 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 12:16:34 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x100) finit_module(r0, &(0x7f0000000080)='\'wlan0wlan0\x00', 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x81}) 12:16:34 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 325.966449] IPVS: ftp: loaded support on port[0] = 21 12:16:35 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:35 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffff9c, 0x28, &(0x7f0000000240)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r1, &(0x7f0000002600)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003640)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000001180)=""/166, 0xa6}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/220, 0xdc}, {&(0x7f0000002340)=""/128, 0x80}, {&(0x7f0000000700)=""/133, 0x85}], 0x7, &(0x7f0000002500)=""/249, 0xf9, 0xfff}, 0x40) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r5 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='io.stat\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpuacct.usage_all\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x4, 0x401, 0x9ac6, 0x6, 0x0, 0xe35b, 0x10, 0x9, 0x8c32, 0x81, 0x1f93, 0x3ff, 0x3, 0x5, 0x1d, 0x2, 0x7c08, 0x0, 0x910d, 0x80, 0x1, 0xfffffffffffffd2f, 0xffffffffffff0000, 0xfffffffffffff800, 0x2, 0x3f, 0x100000, 0x3, 0x2c780000000, 0x5, 0x9, 0x9, 0x10000, 0x7fffffff, 0x8000, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x1f}, 0x242, 0x7, 0x0, 0x2, 0x7f, 0x401, 0x5}, r5, 0x0, r7, 0xb) close(r8) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) r10 = perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x70, 0x3, 0x68, 0x6, 0x1, 0x0, 0x20, 0x82154, 0x3, 0x6, 0x0, 0x2, 0x0, 0x9, 0x8, 0x0, 0x1, 0x6, 0xffff, 0x8000, 0x82e, 0xfffffffffffffff7, 0x80, 0x20, 0x5, 0x0, 0xb0, 0x100, 0x3, 0x35, 0x3, 0x7f, 0x2, 0x6, 0x1, 0x8, 0x5, 0x0, 0x9, 0x6, @perf_config_ext={0x2dc, 0x43d}, 0x4, 0x3, 0x2, 0x2, 0x3, 0x1000, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x1f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={r9, 0x1, 0x8}, 0xfffffffffffffff8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f00000002c0)='./file0\x00'}, 0xfffffffffffffe14) openat$cgroup_int(r7, &(0x7f0000000640)='\x89high\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000580)=0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x2}, 0xfffffffffffffd8e) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) [ 326.267806] chnl_net:caif_netlink_parms(): no params data found 12:16:35 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:35 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000002180)=""/223, 0xdf}], 0x3, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f00000006c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000000280)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 326.454021] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.460591] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.469317] device bridge_slave_0 entered promiscuous mode [ 326.505144] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.511732] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.520478] device bridge_slave_1 entered promiscuous mode [ 326.607169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 326.646676] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 326.692236] team0: Port device team_slave_0 added [ 326.701063] team0: Port device team_slave_1 added [ 326.792166] device hsr_slave_0 entered promiscuous mode [ 326.838253] device hsr_slave_1 entered promiscuous mode [ 326.896287] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.902930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.910220] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.916900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.005913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.029203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.043029] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.052497] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.066532] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 327.087090] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.106440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.114730] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.121263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.174251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.182820] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.189355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.199563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.208823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.223426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.231422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.255112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 327.263858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.286631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.334446] 8021q: adding VLAN 0 to HW filter on device batadv0 12:16:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x3f, 0x3, 0x3, 0x0, 0x1, 0xffff, 0xfffffffffffffff7, 0x31a1, 0x0, 0x9}) ioctl$TCSETAF(r1, 0x402c542c, &(0x7f0000000100)) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="edb0f0ed6dff6b1292848fe9bec048") 12:16:36 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000002180)=""/223, 0xdf}], 0x3, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f00000006c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000000280)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 12:16:36 executing program 1: r0 = socket(0x0, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:16:36 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$kcm(0x10, 0x4000000003, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0124b0eba06ec400034100000000001400003f000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x5b89, 0x8, [0xff, 0x7ff]}) 12:16:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0078ca1056008c57ce748ee81c4118f8bb7697a6ee6c6d4cc712d6da0500000000000000e7d9f9ef34313796741769248111142a44b52405d3bedd9443cf4dca2399a0ac96abc961ea74dff92fd7c424fb00b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97634b5bf66cef06b2672e"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) r3 = getpgid(0xffffffffffffffff) waitid(0x2, r3, &(0x7f0000000340), 0x20000001, &(0x7f00000003c0)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:16:37 executing program 1: r0 = socket(0x0, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 328.003594] ================================================================== [ 328.011096] BUG: KMSAN: uninit-value in __se_sys_waitid+0x32c/0xb30 [ 328.017562] CPU: 1 PID: 10575 Comm: syz-executor.2 Not tainted 5.0.0+ #12 [ 328.024524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.033891] Call Trace: [ 328.036599] dump_stack+0x173/0x1d0 [ 328.040273] kmsan_report+0x12e/0x2a0 [ 328.044117] kmsan_internal_check_memory+0xa62/0xb80 [ 328.049292] kmsan_check_memory+0xd/0x10 [ 328.053398] __se_sys_waitid+0x32c/0xb30 [ 328.057536] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 328.063010] ? prepare_exit_to_usermode+0x114/0x420 [ 328.068050] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 328.073292] ? syscall_return_slowpath+0xb2/0x650 [ 328.078230] __x64_sys_waitid+0x62/0x80 [ 328.082241] do_syscall_64+0xbc/0xf0 [ 328.086075] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 328.091295] RIP: 0033:0x458079 [ 328.094525] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.113454] RSP: 002b:00007f9bcf4e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 328.121193] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 328.128483] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000002 [ 328.135793] RBP: 000000000073bf00 R08: 00000000200003c0 R09: 0000000000000000 [ 328.143091] R10: 0000000020000001 R11: 0000000000000246 R12: 00007f9bcf4e46d4 [ 328.150395] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 328.157701] [ 328.159340] Local variable description: ----__pu_val120.i@__se_sys_waitid [ 328.166278] Variable was created at: [ 328.170035] __se_sys_waitid+0x18c/0xb30 [ 328.174112] __x64_sys_waitid+0x62/0x80 [ 328.178091] [ 328.179731] Bytes 0-3 of 4 are uninitialized [ 328.184158] Memory access of size 4 starts at ffff8880835bfe78 [ 328.190133] ================================================================== [ 328.197500] Disabling lock debugging due to kernel taint [ 328.202960] Kernel panic - not syncing: panic_on_warn set ... [ 328.208870] CPU: 1 PID: 10575 Comm: syz-executor.2 Tainted: G B 5.0.0+ #12 [ 328.217204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.226571] Call Trace: [ 328.229195] dump_stack+0x173/0x1d0 [ 328.232856] panic+0x3d1/0xb01 [ 328.236114] kmsan_report+0x293/0x2a0 [ 328.239958] kmsan_internal_check_memory+0xa62/0xb80 [ 328.245114] kmsan_check_memory+0xd/0x10 [ 328.249201] __se_sys_waitid+0x32c/0xb30 [ 328.253329] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 328.258796] ? prepare_exit_to_usermode+0x114/0x420 [ 328.263836] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 328.269053] ? syscall_return_slowpath+0xb2/0x650 [ 328.273938] __x64_sys_waitid+0x62/0x80 [ 328.277931] do_syscall_64+0xbc/0xf0 [ 328.281677] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 328.286887] RIP: 0033:0x458079 [ 328.290093] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.309029] RSP: 002b:00007f9bcf4e3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 328.316767] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 328.324053] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000002 [ 328.331335] RBP: 000000000073bf00 R08: 00000000200003c0 R09: 0000000000000000 [ 328.338632] R10: 0000000020000001 R11: 0000000000000246 R12: 00007f9bcf4e46d4 [ 328.345921] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 328.353960] Kernel Offset: disabled [ 328.357604] Rebooting in 86400 seconds..