[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.883298] audit: type=1800 audit(1553379875.944:25): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.902639] audit: type=1800 audit(1553379875.954:26): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.922143] audit: type=1800 audit(1553379875.964:27): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.237' (ECDSA) to the list of known hosts. 2019/03/23 22:24:48 fuzzer started 2019/03/23 22:24:54 dialing manager at 10.128.0.26:37019 2019/03/23 22:24:54 syscalls: 1 2019/03/23 22:24:54 code coverage: enabled 2019/03/23 22:24:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/23 22:24:54 extra coverage: extra coverage is not supported by the kernel 2019/03/23 22:24:54 setuid sandbox: enabled 2019/03/23 22:24:54 namespace sandbox: enabled 2019/03/23 22:24:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/23 22:24:54 fault injection: enabled 2019/03/23 22:24:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/23 22:24:54 net packet injection: enabled 2019/03/23 22:24:54 net device setup: enabled 22:28:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) syzkaller login: [ 329.415849] IPVS: ftp: loaded support on port[0] = 21 [ 329.589879] chnl_net:caif_netlink_parms(): no params data found [ 329.668046] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.674772] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.683414] device bridge_slave_0 entered promiscuous mode [ 329.693588] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.700152] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.708817] device bridge_slave_1 entered promiscuous mode [ 329.743021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.755321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.790824] team0: Port device team_slave_0 added [ 329.799724] team0: Port device team_slave_1 added [ 329.977175] device hsr_slave_0 entered promiscuous mode [ 330.152529] device hsr_slave_1 entered promiscuous mode [ 330.433607] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.440209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.447671] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.454299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.538362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.559938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.575193] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.586392] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.600093] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 330.620393] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.635212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.643979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.654202] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.660827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.713169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.723098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.739200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.748158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.756859] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.763547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.771488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.780826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.790229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.799336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.808379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.817550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.826468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.835216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.844161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.852739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.867059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.875278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.919386] 8021q: adding VLAN 0 to HW filter on device batadv0 22:28:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000"], 0x1}}, 0x0) 22:28:29 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x49) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@local, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffff}, [@map, @jmp={0x5, 0x0, 0xc, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x0, 0x3, 0x0, 0x4, 0x6, 0x10}]}, 0x0, 0x3, 0xe1, &(0x7f0000000100)=""/225, 0x41100, 0x0, [], r0, 0xb}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000011c0)={0x18, r1, 0x324, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x20040004) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x7ffff) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) unshare(0x40000000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x129a00, 0x0) shmdt(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000440), 0x20, 0x0, 0x0) [ 331.389260] IPVS: ftp: loaded support on port[0] = 21 [ 331.511301] IPVS: ftp: loaded support on port[0] = 21 22:28:29 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, 0x5, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}}}, 0xffffffffffffff75) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x80000001) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x3d2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000540)={0x6}, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000000000, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) time(&(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40485404, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000900)) r8 = socket$inet6(0xa, 0x3, 0x2000000000003a) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040)=0x8, 0x145) connect(r3, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'syzkaller0\x00'}}, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe, 0x8}, 0xc) read$eventfd(r1, 0x0, 0x223) timerfd_create(0x6, 0x0) [ 331.862817] hrtimer: interrupt took 39500 ns 22:28:30 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x2800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000400)) getegid() stat(0xfffffffffffffffe, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() fcntl$setstatus(r1, 0x4, 0x40000) stat(0x0, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) geteuid() fchownat(r2, 0x0, 0x0, r3, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x184) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/188}) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) fallocate(r0, 0x9, 0x10000, 0x9) 22:28:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 22:28:31 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x200000c0}}, 0x80) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'team_slave_1\x00'}}, 0x1e) ioctl$TIOCNOTTY(r1, 0x5422) 22:28:31 executing program 0: r0 = socket(0x40100000015, 0x801, 0x0) getsockopt(r0, 0x114, 0x2718, 0x0, &(0x7f0000000100)) [ 333.286521] IPVS: ftp: loaded support on port[0] = 21 22:28:31 executing program 0: semop(0x0, 0x0, 0x106) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x7, 0x103, 0x1, {0x1, 0x0, 0xd6a8}}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x0, "034d358da6e26042f391e7d0d81aeaa07dfa7736b6db5a4c651067e8f4d2a259", 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r1, 0x9}, &(0x7f00000000c0)=0x8) [ 333.490418] chnl_net:caif_netlink_parms(): no params data found 22:28:31 executing program 0: semop(0x0, 0x0, 0x106) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x7, 0x103, 0x1, {0x1, 0x0, 0xd6a8}}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000080)={0x0, "034d358da6e26042f391e7d0d81aeaa07dfa7736b6db5a4c651067e8f4d2a259", 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r1, 0x9}, &(0x7f00000000c0)=0x8) [ 333.642634] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.649293] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.658011] device bridge_slave_0 entered promiscuous mode [ 333.689806] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.696554] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.705209] device bridge_slave_1 entered promiscuous mode 22:28:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') openat(r2, &(0x7f0000000080)='./file0\x00', 0x20300, 0x144) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20003, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0xfffffffffffffffd}, 0x51) [ 333.786491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 333.806056] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 333.876186] team0: Port device team_slave_0 added [ 333.905171] team0: Port device team_slave_1 added 22:28:32 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x552d) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2a9, 0x80400) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto(r1, &(0x7f0000000100)="120000001800e7ef007b0000000000001da1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, [], 0x12}, 0x80}}, [0x9, 0x2, 0x6, 0x80000000, 0x0, 0x416, 0x5102, 0xfffffffffffffffb, 0x8bbf, 0x5, 0xfffffffffffffffb, 0x3ff, 0x837d, 0xfffffffffffffffe, 0x400]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r4, 0xdf, "82970c42c49eedabe8925538a41a27fe353e96119199399bb2bdca3ff87b27d9104b636bf46d7117a34d7035b03917d4522d6564bb9e0526f6214cfe2b09b4598e4a70a8b6b70e5d686a78f55d4e915515c683b6503b2d6944b744d46849c62cf8b58ee5eb8474b31156790884f956d1506d6d68ac90961a5ef6e2285b6b252c543c632bb792e2e58b27ab766ffab708f662527a9f19063b88b578168963dbb480d23e46fc72190bb256ced7c5ed81fab6234f34850caeab9f8d7bef48d8af1275ce3f8299779d787cb8e572264bad05a496e5790c783a33fba9a4acc56653"}, &(0x7f00000003c0)=0xe7) [ 334.047624] device hsr_slave_0 entered promiscuous mode [ 334.103505] device hsr_slave_1 entered promiscuous mode [ 334.177100] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.183764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.190925] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.197591] bridge0: port 1(bridge_slave_0) entered forwarding state 22:28:32 executing program 0: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000000c0), 0x20000000000003fa) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000001c0)={0x7, 0x8, 0x3}) [ 334.370774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.415859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.429399] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.453055] bridge0: port 2(bridge_slave_1) entered disabled state 22:28:32 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0)=0x7, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x1, 0x0, 0x35735743, 0x5, 0x8000, 0x1, 0x1, 0x2af1, 0x1, 0x0, 0x1, 0x7}}) [ 334.464839] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 334.497294] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.527388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.536175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.545908] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.552483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.602104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.610894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.619230] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.625893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.635567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.644968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 22:28:32 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}, {{@in6=@initdev}, 0x0, @in=@local}}, 0xe8) [ 334.696026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.706013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.739148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.748614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.757523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.766600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.775865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.784570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.793349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.802612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.839521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.892774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.901193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 22:28:33 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x42002) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7}, 0x7) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) ioctl$FICLONE(r0, 0x40049409, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002004}) 22:28:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="81000000160081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x2000000000000005, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1f, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000140)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x79}]}, 0xfdef) [ 335.236565] device nr0 entered promiscuous mode 22:28:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x8, 0x4, 0x1}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x2002) shmdt(0x0) 22:28:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000040)={0x1, 0x44, &(0x7f0000000240)="f393ca6e6a52594067c493676e5f97ef86fd4e9d4e4bf6ac5df403d1908036a4bff630b90ee075358a30170e758a1fdcb7a1d2798623ddf5a8e599b9bd909808872e473ba95f43361d3fc16d5e93b117691de0e63e2714480a207d634539f0962eb82037d56bddb5ded6f5c9886076f3cc0ca5d3b2aea95b183ba47ae0e6d18621db7537798c23418dec7e30293583079f8c54df39aaeaf81c97e20d142f1783c4955c90736d77fd43acd9d4c99c30f2b55b", {0x7, 0x2, 0x3677724d, 0x0, 0x7, 0x5da, 0xf, 0xfffffffffffffffb}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x501000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000340)=0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES64=r1], @ANYBLOB="ef003e36463783c771eaa77111b66145ceac61327869a87da48e1b6d89de205f799d9e5ecd643825f083a23db3714e35272bc63a7375606e97f8b479937bb6915041dcbecf3475cba18e5c77b9383445619d0d13f50e700a36b91fb3884c2c48744e4c8a0d02be54f531950bcebff41e7fe9f5dd297bea98adef4e5553534d4ce9c1f95dfe78d3a02aa4786348c5c23a1d84374f11a40bc9bbe0960a7ba25451da6c6712c9ac0980e41b7e91497329cbc392dc22", @ANYRES16=r1]]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x186, 0x0, 0x40302e}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000001c0)) 22:28:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x800) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x1000, 0xffffffff, 0x29, &(0x7f0000000040)="72255d0d65f7681410b8f35fecb920231d5d3548470456871b1d1d9d794b4dcf000000000000000000"}) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000540)=0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x7fffffff, 0x4d, 0x7, 'queue1\x00', 0x99a}) [ 335.573214] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 335.660227] kvm [10887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x40302e 22:28:33 executing program 1: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$eventfd(r0, &(0x7f0000000040)=0x80000001, 0x8) [ 335.723803] kvm [10887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x40302e 22:28:33 executing program 0: r0 = socket$kcm(0xa, 0x3fffffffffffe, 0x73) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x8001, 0x1000, 0x8, 0x4, 0x1, 0xd601}) sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x29, 0x5}], 0x10}, 0x0) 22:28:34 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x1cd6a65}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={r3, r4, 0x9}) write$cgroup_int(r2, &(0x7f0000000980), 0x12) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8041) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x800000000000000, 0x0, 0x1, 0x2004, 0x11}) 22:28:34 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x81) 22:28:34 executing program 1: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x84000482) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x0, 0xb5, "40cc31039479ba87b6aefd0e27e76fcf7469e48b2e615c967d0047142efc93419d5ec744b1e486688e3968f6807a809f9dfb75aca27d7d8c99af9a3bc6354df57208fd8b8a063e74f6810cf89f7e6a7c4a8f53a36e9465ecec61fda0b238dc15364bac83873893ebba04fe1495b4f25398a17640c82378211a8288a252a81b42422bfaaca3d3a31ae222ec4b21369445287b584ecd776366189af771abdd1f079f1324c8ca5134f92f78dc956b10ce5c6e22d9c89a"}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fd", 0x1}], 0x1) 22:28:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000280), 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="c880cd62557d51c9e06fb5c64aa679c1761fa116de47955a5e689bc186", 0x1d}, {&(0x7f0000000140)="6ffc53942b355e8fe78a7a51b401becd48e1288f8737056ceb358e912163f329f5ab936780e5ea8c4617d2571d7c961b3332d1ee5443fcf3e0ca9b4eea06fe45f8e0bebc3a836376251db031999b6f6e98866266c72c38d3901eb40ad13cf8f03574b07a04661388de9b03daf074ba47e54b7eee676c3d7aea5383844b534095e0b22deeff9a13a2e7230dbfadb59d49a16e597baa38cc82c13cbee70c59f0f1a38a5af3e1ac547e35cb99bce9b44dad6f18b6e5d9149a1e657543", 0xbb}, {&(0x7f0000000200)="b5a4521112f7b32830ec729c29c131b7797e773b18d75253672329caee343e4cf829e1b939eb1b2653d658a3387b79cce942fd3eb657936d8bc654ff4b6d681c20ffe453144afb780153ebf77023f0ce9bbb1ab23371d3eca2bc2398a1e36f94e8fdf45d2a32b0049b4aa5dccbbd4a419bc994d26071", 0x76}], 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x8e30, 0x0, 0x0, 0x101aa) 22:28:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x8080, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "47fafd7c4ffa3a7ae3cb630d57bab2f8559dd10320f2f750f9270a6ac81ea0e3aa12aee0ca89ca899ac5f7e640b4"}, 0x32) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000300)={{0x2, 0x0, 0x8, 0xffffffff, 'syz0\x00', 0x8}, 0x1, 0x200, 0x9, r3, 0x1, 0x8, 'syz0\x00', &(0x7f00000002c0)=['/dev/qat_adf_ctl\x00'], 0x11, [], [0x100000000, 0x1, 0x3, 0xf7a]}) r4 = epoll_create1(0x0) chroot(&(0x7f0000000180)='./file0\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x0, 0xfffffffffffffffd, 0x60ec, 0x83}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)) epoll_create1(0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) timerfd_settime(r5, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000000c0)={0x2000}) poll(&(0x7f0000000000)=[{r4, 0x1}], 0x1, 0x7fffffff) 22:28:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}}, 0x90) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000006c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r3, 0x2}}, 0x18) getsockopt$inet_buf(r2, 0x0, 0x37, &(0x7f00000001c0)=""/79, &(0x7f00000000c0)=0x4f) listen(r1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x80a, 0x2, [0x7, 0x8000]}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={r4, 0x2}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video1\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x408000, 0x0) sendto$inet6(r5, &(0x7f0000000300)="9dbf1d06c05e680d9bda350d79b153fe2eb0d049bfb9476e58d4de7c5152707b8b4058df9598997622ec54c4e9b18198b97c08f2746213f7c1fe1697540073a300485c3eb7d86953adc7dc1f47d106a115426975d9d48ea431420ab5e127d9c63c05e2963b4a867fb9022ecc8b0c16d9f5bec0ccb5b64f6914509050b4eea308ade298d6bc710599446f991f056acff5bc0b36d1f3225ab637b19d935c36defe93741a5cac210ebe7bcdbc93d17906962f2c", 0xfffffffffffffc4f, 0x0, 0x0, 0x10103) 22:28:35 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x92400, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0xfb0a, @mcast2, 0x10001}, @in6={0xa, 0x4e24, 0x4, @empty, 0x6}, @in6={0xa, 0x4e23, 0x1a3d, @empty, 0x6}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x1000, @local}, @in6={0xa, 0x4e24, 0x9, @mcast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @broadcast}], 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000001bcc66ad984db4000000000004"], 0x10}}, 0x0) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000340)=0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000003000500000000000200423b000000000012b478407f8604"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1010400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000004c0)={0x0, 0x0, {0x14881f54, 0x1f, 0x2, 0x703dd1a3}}) [ 337.056920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:28:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100, 0x0) close(r0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x9f8, 0x200e}) fcntl$setsig(r0, 0xa, 0x1b) syncfs(r0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/49, 0x31}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/237, 0xed}], 0x7) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_team\x00', 0x3}, 0x18) 22:28:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x2, 0xffffffff00000000]) r2 = memfd_create(&(0x7f0000000200)='mime_type{$-ppp1(}\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xe2c2f704f3b9ec3d, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x9, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='numa_-aps\x00') 22:28:35 executing program 1: keyctl$set_reqkey_keyring(0x5, 0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r1, 0x0, 0x455) keyctl$describe(0x6, r1, &(0x7f00000000c0)=""/196, 0xc4) 22:28:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)={0x0, @aes128, 0x0, "3f416479b85d824c"}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/252, 0xfc}], 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x81, 0x80) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)="349e5d57b47456c14ad55419155f921d1c7764100590249452a1cadc747492b83fc35661685d4c27ac5e8c0f16fdc33f1fe605cd6863e45e294554b6eb1ee4913d093f8571c4a3bf107b4d71a176c791de80652506f28623a85e5133f2800fd3b2f2bea6a12f0099c9f4a26e3119cf5fb21bf0bbae3e8415ac6cd544e05148f7e51ca026801cf44cda8d2d12d1907729af6f62") ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000240)={0x3, 0x3, [{0xffffffffffff71b6}, {0xab5, 0x0, 0x87}, {0x7, 0x0, 0x6}]}) 22:28:36 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @speck128}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000200)=""/26, &(0x7f0000000240)=0x1a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x7, {{0xa, 0x4e20, 0x200, @mcast2, 0x8}}}, 0x88) dup3(r1, r1, 0x80000) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'tunl0\x00'}}, 0x1e) 22:28:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syz_tun\x00', 0x3}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x1, 0x33, 0x84a7}, {0x4, 0x1, 0x6, 0x10000}]}) 22:28:36 executing program 1: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="f5"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000000000000c35396657fc2d8dda945437b287c504b02a3466448f999e1fa62a2a3139741d7bef426704cb8eeec9d0e52129958a0aef878ed60480e7ded489e4d0f4db10d37ab90dd3724f408113389a4312d6a1d1310a2105f318512145a6a576912dc612032e996a8d96305c10ad4e0f8d84a41c82ad35f0605a233ce"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:28:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffd, 0x4000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x122400) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x22, 0x2, 0x4) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 22:28:37 executing program 1: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="f5"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000000000000c35396657fc2d8dda945437b287c504b02a3466448f999e1fa62a2a3139741d7bef426704cb8eeec9d0e52129958a0aef878ed60480e7ded489e4d0f4db10d37ab90dd3724f408113389a4312d6a1d1310a2105f318512145a6a576912dc612032e996a8d96305c10ad4e0f8d84a41c82ad35f0605a233ce"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:28:37 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100000200000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 22:28:37 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigaction(0x1c, &(0x7f0000000080)={&(0x7f0000000000)="642e10a3000000000fb6cd660f6086e2070000c4214658de0baf00000081c402459732c4e3d90e33f7c4a2dd03d7410fa0f03144d55d", {0x4}, 0x8000000, &(0x7f0000000040)="67f3363e43de7a078f897880e636f30f5f995e29c454c42121d5da8fc97c815a00263e430f2ecb2ef046fe40900f01d4c401425e2ac4226d396639"}, &(0x7f0000000180)={&(0x7f00000000c0)="3e400fd5194501b75400000066640fa2d9c9c4e1fee68cb1000000808f2878c161130c652e660f383eb0eaaabe228f6978d79a00080000f36cc40265365f0a", {}, 0x0, &(0x7f0000000140)="c483316f5d0000c4827978bf382e0000f26cf2400f2b7100662500803e420f421ac423095d68f045c4e211409ffeefffff6747defb660fdb9f00000000"}, 0x8, &(0x7f00000001c0)) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 22:28:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @local}, 0x10) sendto(r0, &(0x7f0000000280)="86", 0x1, 0x4001, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x200080) write$P9_RREADLINK(r1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1000000017010007002e2f66696c653026ec8151209622832a7177afb1189148c29d76accb28a4c97a254baef0cacf571d783da0720d638ecb5bab4c73e905b01f8466a891c24573ab137fa39bfb78fe37586010e09078fd6a0f76004381c83d0f46b7e6f962b6dfa0a69c609de3cb2f598abc8f7123787a1b92213679f35582347337e78b1f0e1f96bad1d0ddeb7de79461d5e7fb97f66927545082d5bdecaa72cf9dd5b34b5ee1450f673ba6e121606c01ec3606c07aaa4dca81bda3fcc483e0d5ef60dfa2dd68876f03ffc90b40ec050e702f5483ae4fe3cb62036fd960fe15"], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000001780)={&(0x7f00000000c0)={0x2c, 0x5, r2, 0x2e}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000100)="fe141d2a41ed41fc91d28c15e9375b148a76334caddfd053db98f532793a327f87ee9ba27b81f852937b02e6d96641bab8bcb1a1dd322b4063e286cdc682325963166f71cd5168b05866c296a9aa46501e6604959a344c96cd0e15c5839178ff8ba8e78ac27920185dc03f1c1df02c4e033c76d31a98ff05d4f7d4f740169b4e41dc98c882b3760ab4c2fe46b34630f26cff9bf6f380a8ad9a1d1b9d09f6e7a5b056a17132a1a12cf2be31d42bf5a3ab6e7c062f0e75c74809feef5ae82401065e9409505a8f5dfa335852a191057fe25c69a583e61f559cf0a26a2633aa3f65f3576f21", 0xe4}, {&(0x7f00000002c0)="35748de6b1e6b5d9590fe675aa479a4fd976dfb7956bcaf74e30af94342501759cac6fd6daa75a180128f7b27ec9eeee1bf8a63b253bcb3bac2eea9894be6ad13d1215d1", 0x44}, {&(0x7f0000000340)="9621c17e83b11d4bae7bd35d58aa34b7a5608b0d29c0c67fa697ded36000923ea3e6319c1f82881a4fdaede3841c9a7d2616ddbbe1340b358cad9f31ff854183fe65dc75692c13871bd0dc77ae5da4b28947a5e538b0bdb8dcd2cc906154ada9f469b1aae832768e57fca4f3b3eaa42efea75d64387c19c37c001df17de28bbd841c26737076", 0x86}, {&(0x7f0000000400)="82702fdeef51e8a338365cf46efb46cf6017e0c9feab1fede7343751774535d2ebbc4d45ad2f8cd6f25087d89288d55577cdd38423f6ced17f8937d899c6c668e678ebbd6bcdecfad295f7f9396ac442586cc8aaeed3136000fcf6f11b928bfd14c04d38fe61e2a1bb3d11a84714c74386792edf672994", 0x77}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="e3bf849314599eb940c4713d09492de2fa6fd13bf98455430897d86a44bfc0f836a08888a2efe0150d527b6df7d4c94ef9edae0eb55c94ce08ba8778412593d2d7fec9a752018286d941c2fbe668fb76a214bccfc8a3a36daac89e9452fc7f9a8fafc2ff01f1ed6a82a00483cd13e51897d836a5599529a5af3b09cdb6177de66a768fbc28081b194761c72cd3755a3ce40fa3e4005ac58396a6f59d90848c58c803d1c9142ed499bb86ad9141d39707f58bf8e6c9aa2d27957cc8b4ad5f2cdc7284d73c744a33935665e1bf08f4986e", 0xd0}, {&(0x7f0000001580)="884526524824151df3a7f7d6c6c127d214c6c6101be83e1c3ce543a2352a796fb85a62eb6912a68d21fed0ac3f093c3b89463a78c11cd880e8eefa834c02cc71dbf276845d53dd1f21db64ce4e940523fbe924eac5dbff81067ad3d0def45366fd8f953d53102a9171752b5fc6111d009d568ddafb0fc354dedb5294bb96ff0cdcdb3915bdc3352e9e5d3c13afc4", 0x8e}, {&(0x7f0000001640)="87a87450bbf790273b9ebfc89fccae92f5a7de58f662a501eafd64b039a62be97a9832ec59a81e466d195e07f6d3584c48fae36139c89c77d979bdcae60ea0e4cb9555006dab99098ed69fa5", 0x4c}, {&(0x7f0000000240)}], 0x9, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003b80)=""/56, 0x38}], 0x1}}], 0x1, 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x2, 0x13000}) keyctl$set_reqkey_keyring(0xe, 0x4) 22:28:37 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0xc3, 0x0, 0x568bbd78, "4d4981a80f2e54723b688c5920213d290a171cb844671f68c84ccb4779b28cd951d697f3c4fa707ad1fbe2431fec136d8d49a04a0f8f373262cb2fb4679a648859826748e35f78cffea496d6105fd82481effe3d7ff3c1d136a331b3580ecbfaf61a51d33bd393c0aa19a5383babfb8c2d7b1e36663f350a741725264fd5a4f7f5e3e09426971f30431982ea9d82d3885affa8e8f805ad919d7a15bd953b770ab4547d53002df6a2a8575d91a9b87d963639efb03e0d05fe006427085392a18af915e2"}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x80000001, 0x6, 0x7, 0x593c, 0x1}, 0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vxcan1\x00', 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000280)=0x4, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@ipv4={[], [], @remote}, 0x71, r1}) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$l2tp(r0, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3}}, 0x26) write$FUSE_POLL(r0, &(0x7f00000003c0)={0x18, 0x0, 0x1, {0x6}}, 0x18) rt_sigpending(&(0x7f0000000400), 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000440), 0x4) ppoll(&(0x7f0000000480)=[{r0, 0x100}], 0x1, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={0x4}, 0x8) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x3, 0x201) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x20, 0x0, 0x5}}, 0x14) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000600)={0x5, &(0x7f00000005c0)=[{}, {}, {}, {}, {}]}) write$apparmor_current(r0, &(0x7f0000000640)=@profile={'permprofile ', '/dev/input/event#\x00'}, 0x1e) ppoll(&(0x7f0000000680)=[{r0, 0x2190}, {r2, 0x8030}, {r0, 0x2100}], 0x3, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000700)={0x6}, 0x8) lsetxattr$security_selinux(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='security.selinux\x00', &(0x7f00000007c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000800)=""/200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000900)={0x49, 0x3, 0x1, 0x6, 0x12, 0x5, 0x6, 0x6, 0x4, 0x2c, 0xbfe0, 0x80}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000940)=""/116, &(0x7f00000009c0)=0x74) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000a00)=""/210) connect(r0, &(0x7f0000000b00)=@in6={0xa, 0x4e22, 0x2, @mcast1, 0x4e6}, 0x80) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000b80)) write$P9_RWRITE(r2, &(0x7f0000000bc0)={0xb, 0x77, 0x2, 0x101}, 0xb) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000210}, 0xc, &(0x7f0000000c40)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000cc0)={0x2, r2}) 22:28:38 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000dfa000/0x4000)=nil, 0x4000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000057e000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x200100, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000200)={0x0, 0x10000, 0x2, &(0x7f00000001c0)=0x8000}) mlock(&(0x7f0000dfd000/0x4000)=nil, 0x4000) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000040)) 22:28:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000000)='\x02\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x02\x00\xf3\x00\x00\x00\x00\x00', 0x14, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) 22:28:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00\x00\xac\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\x9d\x8c\v\x00\x00\x00\x00\x00\x00\x00\x06\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x80040) r2 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x402c5342, &(0x7f0000000080)={0x0, 0x1f000000, 'client\x93\xe2X\xa1![\xce\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\x00', 0x0, "62279869fd3de01e", "48d755512dcb6c84378c5d6ebff4caa2ee2903faa147f032504cf3c24b77ffc0"}) [ 340.493454] IPVS: ftp: loaded support on port[0] = 21 22:28:38 executing program 1: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="f5"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000100000000000000c35396657fc2d8dda945437b287c504b02a3466448f999e1fa62a2a3139741d7bef426704cb8eeec9d0e52129958a0aef878ed60480e7ded489e4d0f4db10d37ab90dd3724f408113389a4312d6a1d1310a2105f318512145a6a576912dc612032e996a8d96305c10ad4e0f8d84a41c82ad35f0605a233ce"]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:28:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xba) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) [ 340.749722] chnl_net:caif_netlink_parms(): no params data found [ 340.864401] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.871105] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.880662] device bridge_slave_0 entered promiscuous mode 22:28:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x804, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x400000000002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000700)={'syz0\x00', {0x3ff, 0x800, 0x0, 0x8}, 0x1f, [0x1, 0xffffffffffffffff, 0x59, 0x0, 0x6, 0x1ff, 0x4, 0x69, 0x1, 0x401, 0xf21, 0x100000000, 0x10001, 0xef, 0x7fff, 0x8000, 0x100, 0xfffffffffffffffb, 0x6, 0x5, 0x4, 0x3c, 0xfff, 0x8, 0x8, 0x8, 0x1f, 0x40, 0xfffffffffffffffe, 0x9, 0x3, 0x20, 0x2, 0x20, 0x10, 0x4, 0x1, 0x7, 0x4, 0x2, 0x3, 0x3ff, 0x3, 0x8, 0x100, 0x5, 0x100000001, 0xffffffffffffff2f, 0x8000, 0x7fff, 0x2, 0x7, 0xeed, 0x2, 0xb3, 0x6, 0xe7f7, 0x1, 0x7fffffff, 0x625, 0x5, 0xba, 0x97, 0x8], [0x81, 0x7, 0x9, 0x0, 0x2, 0x1, 0x6, 0x20, 0x5, 0x0, 0x3, 0x80000001, 0x8, 0x4, 0x1f, 0x80, 0x8, 0x10000, 0x8, 0x400, 0x63b, 0x100000001, 0x7, 0x2, 0x7, 0xe1, 0x7, 0x1, 0x957f, 0x0, 0x9, 0x3, 0xff, 0x4, 0x5, 0x2, 0x1, 0x57, 0x42, 0x101, 0xfffffffffffffffb, 0x7, 0x8, 0x8, 0x9b, 0x40, 0x100000001, 0x8, 0x3f, 0x1, 0x1f, 0x1000, 0x7ff, 0x50f3, 0xffff, 0xffffffffffffffff, 0xffff, 0x7, 0x8001, 0x8, 0x9, 0xffffffffffffffc1, 0xfff, 0x6], [0x100, 0x5, 0x9, 0x200, 0xffffffffffffffff, 0x9, 0x81, 0x1, 0x1, 0x5, 0xffffffff7fffffff, 0xd13, 0x100000000, 0x7ff, 0x7, 0x0, 0x5, 0x30, 0x4, 0x0, 0xfffffffffffffffb, 0x2, 0x9, 0xfff, 0x9, 0x3f, 0x2, 0x5d, 0x337, 0x100000000, 0x0, 0x6, 0xcbed, 0x7, 0xfff, 0x3, 0x8, 0x4, 0x2, 0x40, 0x0, 0x6, 0x9, 0x77, 0x0, 0x0, 0x9, 0x5, 0x2, 0x2, 0x2f0deb70, 0x8, 0x100000000, 0x63, 0x1, 0xbc468bf, 0x5, 0x5, 0x2, 0xfff, 0xffffffffffffffff, 0x80000001, 0x6, 0x1f], [0x7fffffff, 0x9, 0x7, 0x9, 0x400, 0x7, 0x100, 0xffffffffffffffda, 0x43e, 0x0, 0x1, 0x7ff, 0x0, 0x427, 0x5, 0x25fa, 0x7fffffff, 0x9, 0xffff, 0xffff, 0x822a, 0x6, 0x101, 0x2, 0x3, 0x2, 0x8, 0x2, 0x2, 0x2, 0x1f, 0x1, 0x0, 0x8, 0x8, 0x2, 0x81, 0x7fff, 0x5, 0x0, 0x1f80000000000, 0x4d14, 0x5, 0x100000000, 0x800, 0x800, 0x1f, 0x8, 0x2aa, 0x7ff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x5, 0x4, 0x0, 0x1b5, 0x5, 0x4, 0x1, 0x4, 0x5]}, 0x45c) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x4, 0x5}, {0x5, 0x1}, {0x2, 0x7f}, {0x6, 0x2165}, {0x832, 0x40}, {0x6000000000000000, 0x9}, {0xfff, 0x3}, {0xbde, 0x5038}, {0x7, 0x9}]}) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0xaa2, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x50000, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 340.913438] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.920184] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.928772] device bridge_slave_1 entered promiscuous mode [ 341.024109] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 341.052472] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 341.103404] team0: Port device team_slave_0 added [ 341.112764] team0: Port device team_slave_1 added 22:28:39 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000700)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) [ 341.196988] device hsr_slave_0 entered promiscuous mode [ 342.224788] device hsr_slave_1 entered promiscuous mode 22:28:40 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000700)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) [ 342.493346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.512616] ------------[ cut here ]------------ [ 342.517436] kernel BUG at mm/kmsan/kmsan.c:729! [ 342.522222] invalid opcode: 0000 [#1] SMP [ 342.523133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.526399] CPU: 0 PID: 10841 Comm: syz-executor.1 Not tainted 5.0.0+ #16 [ 342.526409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.526457] RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 [ 342.526489] Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b [ 342.534321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.539946] RSP: 0018:ffff888051b8fc50 EFLAGS: 00010046 [ 342.557480] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.574163] RAX: 0000000000000002 RBX: 00000000b16000ab RCX: ffff888000000000 [ 342.574175] RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff888051b8fd6c [ 342.574186] RBP: ffff888051b8fd00 R08: ffff888051b8fd6c R09: ffff8880d1b8fd6c [ 342.574197] R10: ffff888051b9fd6c R11: ffffffff823f1cb0 R12: 0000000000000004 [ 342.574207] R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 [ 342.574222] FS: 00000000024b0940(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 342.574234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.574245] CR2: 000000000096ffd0 CR3: 0000000051b5d000 CR4: 00000000001406f0 [ 342.574271] Call Trace: [ 342.628274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.628706] ? do_wait+0xb2a/0xbd0 [ 342.638244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.642937] kmsan_check_memory+0xd/0x10 [ 342.642960] kernel_wait4+0x4ba/0x5e0 [ 342.642997] ? __do_sys_exit_group+0x30/0x30 [ 342.643026] __se_sys_wait4+0x15f/0x2b0 [ 342.643062] ? syscall_return_slowpath+0xb2/0x650 [ 342.651247] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.652973] ? __se_sys_clock_gettime+0x2b4/0x330 [ 342.652999] ? task_kmsan_context_state+0x4b/0x90 [ 342.653027] __x64_sys_wait4+0x56/0x70 [ 342.653064] do_syscall_64+0xbc/0xf0 [ 342.660590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.664094] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 342.664127] RIP: 0033:0x41224a [ 342.731532] Code: 0f 83 6a 18 00 00 c3 66 0f 1f 84 00 00 00 00 00 8b 05 4e 40 64 00 85 c0 75 36 45 31 d2 48 63 d2 48 63 ff b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 d4 ff ff ff f7 [ 342.750471] RSP: 002b:0000000000a4fd78 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 342.758293] RAX: ffffffffffffffda RBX: 00000000000535fd RCX: 000000000041224a [ 342.765582] RDX: 0000000040000001 RSI: 0000000000a4fdb0 RDI: ffffffffffffffff [ 342.772963] RBP: 0000000000000030 R08: 0000000000000001 R09: 00000000024b0940 [ 342.780342] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 342.787637] R13: 0000000000a4fdb0 R14: 00000000000532d7 R15: 0000000000a4fdc0 [ 342.794938] Modules linked in: [ 342.798177] ---[ end trace 2872ef51e17850a8 ]--- [ 342.803059] RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 [ 342.808969] Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b [ 342.827889] RSP: 0018:ffff888051b8fc50 EFLAGS: 00010046 [ 342.833278] RAX: 0000000000000002 RBX: 00000000b16000ab RCX: ffff888000000000 [ 342.840557] RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff888051b8fd6c [ 342.848069] RBP: ffff888051b8fd00 R08: ffff888051b8fd6c R09: ffff8880d1b8fd6c [ 342.855356] R10: ffff888051b9fd6c R11: ffffffff823f1cb0 R12: 0000000000000004 [ 342.862645] R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 [ 342.869961] FS: 00000000024b0940(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 342.878210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.884104] CR2: 000000000096ffd0 CR3: 0000000051b5d000 CR4: 00000000001406f0 [ 342.891385] Kernel panic - not syncing: Fatal exception [ 342.897533] Kernel Offset: disabled [ 342.901180] Rebooting in 86400 seconds..