[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 101.417441][ T30] audit: type=1800 audit(1565355608.467:25): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 101.442711][ T30] audit: type=1800 audit(1565355608.487:26): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 101.481312][ T30] audit: type=1800 audit(1565355608.517:27): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. 2019/08/09 13:00:21 fuzzer started 2019/08/09 13:00:27 dialing manager at 10.128.0.26:46761 2019/08/09 13:00:27 syscalls: 2372 2019/08/09 13:00:27 code coverage: enabled 2019/08/09 13:00:27 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/09 13:00:27 extra coverage: enabled 2019/08/09 13:00:27 setuid sandbox: enabled 2019/08/09 13:00:27 namespace sandbox: enabled 2019/08/09 13:00:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/09 13:00:27 fault injection: enabled 2019/08/09 13:00:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/09 13:00:27 net packet injection: enabled 2019/08/09 13:00:27 net device setup: enabled 13:03:40 executing program 0: syzkaller login: [ 313.416002][T11625] IPVS: ftp: loaded support on port[0] = 21 [ 313.596703][T11625] chnl_net:caif_netlink_parms(): no params data found [ 313.667083][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.674448][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.683595][T11625] device bridge_slave_0 entered promiscuous mode [ 313.694683][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.701883][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.710958][T11625] device bridge_slave_1 entered promiscuous mode [ 313.750271][T11625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.763992][T11625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.802810][T11625] team0: Port device team_slave_0 added [ 313.813034][T11625] team0: Port device team_slave_1 added [ 313.998446][T11625] device hsr_slave_0 entered promiscuous mode [ 314.162995][T11625] device hsr_slave_1 entered promiscuous mode [ 314.449932][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.457272][T11625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.465258][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.472559][T11625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.577043][T11625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.590768][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.603620][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.617254][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 314.647576][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.656982][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.674645][T11625] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.692124][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.701758][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.711029][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.718271][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.734807][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.744411][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.754021][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.761215][T11627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.782960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.813122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.823598][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.834375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.844274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.854533][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.882903][T11625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.893461][T11625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.937072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.946958][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.956383][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.966345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.975768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.994006][T11625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.013075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:03:42 executing program 0: 13:03:42 executing program 0: 13:03:42 executing program 0: 13:03:42 executing program 0: 13:03:42 executing program 0: 13:03:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x4, 0x4, [@rand_addr]}]}}}], 0x18}}], 0x1, 0x0) 13:03:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000001c0)={0x2f}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='X', 0x1}], 0x132) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) 13:03:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x2, [{0xc001001b}]}) [ 316.638714][T11650] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:03:43 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000100)={0x7e, 0x0, [0x0, 0x0, 0x4b564d03], [0xc1]}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1e96b2decb9f764c) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 13:03:43 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x2000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) 13:03:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') keyctl$invalidate(0x15, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="eab60000d1743ad5b7805d58c1f6285602684b058b894d628107d5bf6880756d4c6999c09be99cc84e11a827ad39033804a6d2be7deea0151a9e2d4ecbb2baaf80bf8bc485b0f5718de587c365c59e05f2e1051fc3388d7f72fc227f482ef4c5ca1dd1efa21c5ca05329450d5cb5a3ea1e71deecc483caaa8fa541538271809f6c028ad61bbaabbf736cb8e61f274f634a61b38cf430e9cc2d4a4c5f9657bdf2511c13aa40e358760f90daca06e0e1d666ffd91f824c04860c75ea6c879d55c0", @ANYRES16=r1, @ANYBLOB="110300000000000000001600000004000100"], 0x18}}, 0x0) 13:03:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)) 13:03:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 317.297635][ C0] hrtimer: interrupt took 80107 ns 13:03:44 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x54, 0x5, 0xeaf, {0xfffffffffffffffe, 0x4}, {0x8}, @cond=[{0x299b, 0x8, 0xfffffffffffffffb, 0x8001, 0x41b, 0x7fff}, {0x5, 0x0, 0x2800000000, 0x5, 0x40, 0x4}]}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x1f, &(0x7f0000000080)=0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$netlink(0x10, 0x3, 0x7) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000140)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe2ed6) accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000200)=0x9, 0x4) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/144, 0x90}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0x34, 0x20, 0x6, "e88ab0e4215e37e2b7873c8cbbdeed6803ad75d400aad6e9144af385de0cc5d1134b9a7009b9b2542a46c5a78658202bab556305"}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0x196f0000}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={r3, 0xe20}, &(0x7f0000000500)=0xc) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0xab2a, 0x0, "25e21f19763e3ca7f62a8a03df5ac3e516476e981a9664e79af91156d7deb7f5179fccfe5ead2d1f98bd13809636b45cef36e7e7a9ddd2ab99e16c0e16b7bbe7c09cff94dc73b5ac3acbc7c993dfc8b9"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'lapb0\x00', r5}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd08b) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r4, 0xb82f, 0x8, 0x5}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000740)=0xffffffffffffffe0, 0x4) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vfio/vfio\x00', 0x2000, 0x0) connect$inet6(r7, &(0x7f00000007c0)={0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast1}, 0x8af}, 0x1c) write$P9_RSETATTR(r0, &(0x7f0000000800)={0x7, 0x1b, 0x2}, 0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={r0, &(0x7f0000000840)="ccae52125a6d043bf6ad9fd280976eadedfad3b8a3738467b50b58d601030214680798eacfb7bf44116fb191a4c9551dc47e29bebb6945ecf9813fa170aca52aa9466ac3b6", &(0x7f00000008c0)=""/40}, 0x18) socket$rxrpc(0x21, 0x2, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000940)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000980)={0x33, 0x37, 0x2, {0x3, 0x4, 0x1, r8, 0x15, 'GPL.[vmnet0/&&(@nodev'}}, 0x33) write$cgroup_int(r0, &(0x7f00000009c0)=0x3ff, 0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000a00)={r6, @in6={{0xa, 0x4e24, 0x1, @local, 0x7fff}}, 0x2, 0xb2d4}, 0x90) [ 318.154320][T11672] IPVS: ftp: loaded support on port[0] = 21 13:03:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 318.422788][T11672] chnl_net:caif_netlink_parms(): no params data found [ 318.553437][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.560689][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.569874][T11672] device bridge_slave_0 entered promiscuous mode [ 318.596879][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.604317][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.613394][T11672] device bridge_slave_1 entered promiscuous mode [ 318.654416][T11672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.671104][T11672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.711920][T11672] team0: Port device team_slave_0 added [ 318.722702][T11672] team0: Port device team_slave_1 added [ 318.948954][T11672] device hsr_slave_0 entered promiscuous mode [ 319.063981][T11672] device hsr_slave_1 entered promiscuous mode [ 319.203146][T11672] debugfs: Directory 'hsr0' with parent '/' already present! 13:03:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='.selinuxbdev\x00', 0xd, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 319.266949][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.274451][T11672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.282553][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.289885][T11672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.373167][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.405079][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.590214][T11672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.637417][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.646506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.663851][T11672] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.704711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.714422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.723698][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.730890][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.742326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.752120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.761263][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.768550][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.777356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.861280][T11672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.871837][T11672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.973667][T11672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.015342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.025811][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.036162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.047286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.057622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.067639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.077142][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.087192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.096660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 13:03:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 320.223454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.233185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:03:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffffffffffffffd, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000066b079d62ca4a578af8076c13fad5ba927feed933213a766da302ac16a9264dfbc86c3042da3eb8bc953075d52fba1fc83dd"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@ipv4={[], [], @empty}, 0x0, 0x32}, 0x0, @in6=@empty}}, 0xe8) 13:03:47 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/16}) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc) dup3(0xffffffffffffffff, r1, 0x0) 13:03:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x81b5, 0x7, 0x2, 0x3, 0x4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x1f}, 0x8) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}}, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x80) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/29) 13:03:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') alarm(0x5c) umount2(&(0x7f0000000100)='.', 0x2) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) 13:03:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) lseek(r0, 0x0, 0x3) fcntl$getflags(r0, 0x409) writev(r0, &(0x7f00007af000)=[{&(0x7f0000000080)="480000001500190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) 13:03:48 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x90) 13:03:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:48 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4002, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x5, 0x1}, 'port0\x00', 0x20, 0x21, 0x800, 0x323d, 0x0, 0xffffffff7fffffff, 0xffff, 0x0, 0x0, 0x5}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x88001) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x102, 0x4) write$P9_RXATTRCREATE(r3, &(0x7f0000000040)={0x3ba}, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x1, 0x0, "7c74be5b739048ca95a493f134b396b12098e32fca4be91dc0218ccd9c1543747b5ab6986dd7f91b83fa5c71a09035c9769a74f1087b942e24259c87a51d9a10e29ad4c6bd9ce2ee3a4c17ccf75e16b6"}, 0xd8) sendfile(r0, r4, 0x0, 0x4e68d5f8) [ 321.373921][T11719] kvm: pic: level sensitive irq not supported [ 321.376512][T11719] kvm: pic: single mode not supported [ 321.402703][T11719] kvm: pic: single mode not supported [ 321.409049][T11719] kvm: pic: level sensitive irq not supported [ 321.416924][T11719] kvm: pic: single mode not supported [ 321.423166][T11719] kvm: pic: level sensitive irq not supported [ 321.429895][T11719] kvm: pic: single mode not supported [ 321.440494][T11719] kvm: pic: single mode not supported [ 321.453821][T11719] kvm: pic: single mode not supported [ 321.475758][T11719] kvm: pic: level sensitive irq not supported [ 321.483199][T11719] kvm: pic: single mode not supported [ 321.490295][T11719] kvm: pic: single mode not supported [ 321.557281][T11719] kvm: pic: single mode not supported [ 321.597068][T11719] kvm: pic: level sensitive irq not supported 13:03:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40000, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x9, 0x3000000, 0x20, 0xcc4, 0x8}) [ 321.613105][T11719] kvm: pic: level sensitive irq not supported [ 321.757643][T11719] kvm: pic: single mode not supported [ 321.764066][T11719] kvm: pic: level sensitive irq not supported [ 321.776915][T11719] kvm: pic: level sensitive irq not supported [ 321.785959][T11728] Unknown ioctl -2145095672 [ 321.812632][T11728] Unknown ioctl 44609 [ 321.842392][T11728] Unknown ioctl -2145095672 [ 321.855909][T11728] Unknown ioctl 44609 13:03:49 executing program 0: r0 = socket(0x1e, 0x5, 0x97c) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000140)=0x10) connect$tipc(r0, &(0x7f0000000040)=@name, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x190) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x34, 0x0, 0x400, 0x4, 0xbe}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x5, 0x8e7}) 13:03:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x49) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e20, @empty}}) 13:03:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000014c0)) [ 322.306737][T11737] kvm: pic: level sensitive irq not supported 13:03:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'vlan0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x7e, 0x7ff, 0x1f8000, "a24ef178fddb45df151221c2544cda496864a3243a185819e55d14eb5f2c398c182007af7aeddb6a2b0281f652fcd6efd123b359a0aee057848d0ed73f4cb05ac658e2f3a06c570eca480013c05ff97ba0c6702c9c55eafbd188e4aa3cd0f171d362853882db8600fbfb3fee4be6c67eb0dfd25ae7d8e08ec97c5dd55c0d"}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 13:03:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x2000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 13:03:49 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400455cb, 0x0) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 13:03:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.325342][T11737] kvm: pic: level sensitive irq not supported [ 322.871566][T11715] Bluetooth: hci0: Frame reassembly failed (-84) 13:03:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/250) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x4, [@union={0xa, 0x5, 0x0, 0x5, 0xdcdd, 0x6, [{0x6, 0x1, 0x794}, {0xe, 0x4, 0x5f}, {0x2, 0x0, 0x7fff}, {0x8, 0x2, 0x7f}, {0xb, 0x1, 0xffff}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x75, 0x1}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x7c, 0x5}, @fwd={0xd}, @var={0x3, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x18, 0x1}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000280), 0xc8}, 0x20) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000340)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x18) write$FUSE_GETXATTR(r0, &(0x7f00000003c0)={0x18, 0x0, 0x7, {0x1}}, 0x18) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) r3 = getuid() r4 = geteuid() getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0xc9ba5f788ffeb644, r2}, {0x2, 0x4, r3}, {0x2, 0x6, r4}], {0x4, 0x4}, [{0x8, 0x1, r5}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000006c0)={0x0, @reserved}) open_by_handle_at(r0, &(0x7f0000000780)={0xbe, 0x1, "03f8375897fa528ead35032ab643cf157ac22b2bef062a91c44e774708fbccc2896fa8560e10a846ba28500e2971fe35531f71735bf315d658be840cf06b9ae7edf0f79b2ffc43b64d0d1487e40c5c1c31dbf1cca31aa1a6d2a19565dbc208617290ba3f3bab2fe0eed6d7d0301fd9dc7f8f5944cfa6f918039c1c8a4f55623aa3be338f392ca46284c67485dd2624859551ffb9b1d234b0fe515139f771bd813d4e9f81f8fc154316be827bc29597b2055cb3ce86ff"}, 0x42) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000840)={0xa0, 0x0, 0x6, {{0x7, 0x2, 0x7, 0x200, 0x6, 0x5, {0x1, 0x8, 0x4, 0x8, 0xa31, 0x8, 0xfff, 0x1, 0x6, 0xfffffffffffffffc, 0x8000, r3, r5, 0x3cc8, 0x8}}, {0x0, 0x8}}}, 0xa0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000900)={0x0, @speck128}) r6 = syz_open_dev$mouse(&(0x7f0000000940)='/dev/input/mouse#\x00', 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) connect$unix(r0, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000a00)={0xffffffffffff8000, 0x200, 0x7e0, 0x4, 0x0, 0x5}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r7, 0x420, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sequencer\x00', 0x2204c0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000bc0), &(0x7f0000000c00)=0x14) ioctl$TUNSETLINK(r0, 0x400454cd, 0x32f) ioctl$TIOCGPTPEER(r8, 0x5441, 0x100) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000c40)={r0, 0x0, 0x5, 0x7, 0x80000000}) 13:03:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.892249][ T17] Bluetooth: hci0: command 0x1003 tx timeout [ 324.898565][T11762] Bluetooth: hci0: sending frame failed (-49) 13:03:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/5) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 325.229516][T11790] IPVS: ftp: loaded support on port[0] = 21 13:03:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 325.447196][T11790] chnl_net:caif_netlink_parms(): no params data found [ 325.528416][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.535783][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.544863][T11790] device bridge_slave_0 entered promiscuous mode [ 325.556157][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.563415][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.572429][T11790] device bridge_slave_1 entered promiscuous mode [ 325.611661][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.625621][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.665321][T11790] team0: Port device team_slave_0 added [ 325.686819][T11790] team0: Port device team_slave_1 added [ 325.729523][T11790] device hsr_slave_0 entered promiscuous mode [ 325.751894][T11790] device hsr_slave_1 entered promiscuous mode [ 325.769373][T11790] debugfs: Directory 'hsr0' with parent '/' already present! [ 325.816439][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.823775][T11790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.831679][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.839012][T11790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.951272][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.978248][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.989778][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.999877][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.034973][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 13:03:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 326.078470][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.124431][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.133755][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.140959][T11627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.220976][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.230826][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.238114][T11627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.249226][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.259977][T11627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.277666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.287368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.312375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.341798][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.404542][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.973023][ T17] Bluetooth: hci0: command 0x1001 tx timeout [ 326.979323][T11762] Bluetooth: hci0: sending frame failed (-49) [ 329.052345][ T17] Bluetooth: hci0: command 0x1009 tx timeout 13:04:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:04:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:04:00 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getgroups(0x7, &(0x7f0000000100)=[0xee00, 0x0, 0xee00, 0xee00, 0xee00, 0xee01, 0xee01]) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x111100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x9d, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r3, &(0x7f0000000400)=""/208, 0xd0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000600)=0xe8) getpeername$tipc(r3, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000006c0)) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000700)={0x7, r3}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000007c0)={0x9, 0x10001, 0x54, 0x0, 0x101, 0x4, 0x8, 0x2, 0x20, 0xfffffffffffffff8, 0x89, 0x2a5, 0x0, 0x51a, 0x8, 0x3, 0xe1, 0x2, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x1a}, 0x9}}, 0x2e2, 0x1, 0xbdaa, 0xffffffff, 0x1}, &(0x7f00000008c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000900)={r7, @in6={{0xa, 0x4e23, 0x9, @rand_addr="bd04132f95e6c40521aea6bceaf5fd9d", 0x4}}, 0xf20, 0x10001}, 0x90) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000000b40)=[{0x1, 0x7, 0x1, 0x3, @tick=0x6, {0x5, 0x400}, {0x401, 0x7fff}, @quote={{0x7fff, 0x100000000}, 0x0, &(0x7f0000000ac0)={0x8ad, 0x20, 0x8, 0x7, @tick=0xffff, {0x2, 0x7}, {0x80000, 0x7}, @ext={0xcb, &(0x7f00000009c0)="01245775d6414e6f6aec9b926fb8750ae2962cd80586499dc77bc7a6429a69be07f6568eabf17a5197381c2550ca18333d429c3f030f7b18c01b89e855e4c492b89c3b57142a5c821c579df72b812143733902208a011cf161f8aa38aee7e3f8117d2120876246fdd73ecbaf15a171a4c47997b33c53c92964c469af1af9c3a149377c0e98a8433cb7e05872ae334fbb7be948b61bc2c259104e0edb4a6f14178729cd6a54b78bb5cce5d200e9819e9c6793fb715d4d21e60b44f2488351b497dc3d68571720b15f628a13"}}}}, {0x5, 0x7fffffff, 0x21ab, 0x3, @time={r8, r9+30000000}, {0x80000000, 0x7}, {0x3f0, 0x2c96}, @result={0x9, 0x47a}}, {0xad, 0x9, 0x7, 0xe22a, @time={0x77359400}, {0x4c, 0x7ff}, {0x5, 0xffffffffffff483e}, @result={0x12b08b0e, 0x1}}, {0x3, 0x3, 0x0, 0x2, @time={0x77359400}, {0xfffffffffffffffa}, {0x1, 0x1}, @result={0x100000000, 0x80000001}}, {0x101, 0x81, 0x4, 0x9, @tick=0x80000000, {0x4, 0xe02f}, {0xff, 0x5}, @queue={0xb4a000000000, {0x5, 0x2}}}, {0x0, 0x9, 0x6, 0x0, @time={0x77359400}, {0x6, 0x1}, {0x80}, @raw32={[0x3, 0x80000000, 0x4]}}], 0x120) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000c80)='cdg\x00', 0x4) getpeername(r4, &(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000d40)=0x80) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000d80)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000dc0)={{0xfa, 0xffff}, 'port1\x00', 0x98ab808fc4b4589c, 0x10800, 0x100000001, 0x4, 0x80, 0x3, 0x8001, 0x0, 0x2, 0x5}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000e80)=""/31) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000f00)={&(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000f40)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001080)={@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x8, @empty, 0x8}}}, {&(0x7f0000000f80)=""/137, 0x89}, &(0x7f0000001040), 0x10}, 0xa0) fcntl$setflags(r6, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000001140)={{0x3, 0x101}, 'port0\x00', 0x1, 0x2, 0x4, 0x7fffffff, 0x57, 0x101, 0x13e8, 0x0, 0x1, 0x3}) 13:04:00 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000013c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x101, 0x2, 0x1, 0x1, 0xfffffffffffffff8, 0x9, 0x4, 0x10000, 0x1000, 0x0, 0x7, 0x2076, 0x3f, 0xd8cf, 0x2, 0x29}}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x3) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) mq_notify(r2, &(0x7f0000001280)={0x0, 0x36, 0x400000000000001, @thr={&(0x7f00000001c0)="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", &(0x7f00000011c0)="2cca5c9f1bd7892da667fc80e15758ed9792b9c36f82c0069b329a971ea11c721f171e322d23349367fb9bc309759bdd728deab31c9593eddc83afce173908b97500ab52624665f4c6fab6bb84ff2667282cdfdd7a45ca931aec3c626e62af99cdc0262438dfce0175d632451ac21a5dcdfb0542658af7f89cd1a9b7dd110b6454"}}) socket$pppoe(0x18, 0x1, 0x0) write$hidraw(r2, &(0x7f0000000140)="5bee3cb377339996fcfba84efd09e9d65654c8fa1b6c38d60da057bb692234e09efc98bdd0e2a82cb06f37492c8a02", 0x2f) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001400)=r2, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000001340)={0xcd}, 0x4) connect(r1, &(0x7f00000012c0)=@x25={0x9, @null=' \x00'}, 0x80) epoll_create(0xfffffffffffffff6) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000000)) 13:04:00 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/213) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000180)=""/79) ioctl$KDSETMODE(r0, 0x4b3a, 0x1f) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') openat$usbmon(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon0\x00', 0x8000, 0x0) munlock(&(0x7f0000ff5000/0x9000)=nil, 0x9000) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000280)) r1 = syz_usb_connect(0x0, 0x4be, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x1c, 0x9e, 0x32, 0x40, 0xbb4, 0xa17, 0xdfb4, 0x1, 0x5, 0x2, 0x1, [{{0x9, 0x2, 0x4ac, 0x1, 0x9, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x5f, 0x9, 0x8, 0x4a, 0x14, 0xae, 0xfffffffffffffffe, [@usb_cdc={[@acm={0x4, 0x24, 0x2, 0xb}, @ether={0xd, 0x24, 0xf, 0x7, 0x3, 0xb994, 0x1, 0x315}, @ether={0xd, 0x24, 0xf, 0x6b44, 0x8, 0x4a58, 0x5, 0x200}, @network_terminal={0x7, 0x24, 0xa, 0x101, 0x6, 0x2b, 0x71}, @mdlm_detail={0xfa, 0x24, 0x13, 0x20, "bec1c3102a3ea9078a74e88f8628f503f07109613fce0fceac41e3245f30b87566ceef1b0cef508eeb4892f060483e9af6fe8e0746f97329052b48da1628283f989a8347513b006173836f61850a14259a88573775d784bfbfd8f148463be60cb5fc0f9904848f0b3bf9b6bb3582267d89cd383f68c4f7334b650299502a36133cce85bdcae176f0d139dfc227f95583e31be0c09370c3f702c47f47f4fe1e53482dccda2762e9b2583616ef16d95a0c76f5cc70e04039e4162ba64e831317d923984e2c7c807b785ac255cceb1e644930197b9d4c236d745f9eaa4d157b7349ebcecbbc997c1971bdcfbdff7e200bf7674071629e65"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x800, 0x7ff}, @mdlm={0x15, 0x24, 0x12, 0x9, "fe1de9595777c0d80cc09d1e641706b1"}, @header={0x5}, @obex={0x5, 0x24, 0x15, 0x8}, @dmm={0x7, 0x24, 0x14, 0x2}, @obex={0x5, 0x24, 0x15, 0xa5aa}, @mdlm_detail={0xc3, 0x24, 0x13, 0x4, "444caafb828d7560cd597879a7857c8e5f0d586fae15154cd1238567aa814dc3899273abf9c7529f8f4ec04b2b6b70acbc118292bcc2ce3819ba4a68ddbb76d2eaf037ecdc702da437b7005717bfd72fe75e279d08a2890d4ef191f01150fd6972628779c0d2f16ee1236e8917b266b1ea1117bc117219e4b8ba927e7a63666faebafec615fa9557912d2a96baed897c765779b923a5f50adb95d07bf53b35d289881a68ce8b2e85accf6feb177de909f8569133d6511bed8de604d9035f5f"}]}], [{{0x9, 0x5, 0xf, 0x2, 0x38, 0x81, 0xcf, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x50, 0x4, 0x1, 0x3, [@generic={0x1b, 0x21, "b3f81c12906f55638807076c3d8a76d969fbe5ee4f363b6b96"}, @generic={0xe6, 0x4, "96a59c74c72676d8b4e28d92986020edddebb2cf48c427191a877d9c0d9f6edb4eb32f81585441676cc3bccb5d193c17254b44cc5ff798f19b06286be7bf9b2078040e1763162b7869877240f6214652b11a38a9c7302485274c6b357a1c53b5c82e4f66de371b4bb2a2cf33a5ed492c1894e581c74066653fab535eec484bf302681d043019b496d5fcc8424d7f1c2c4ed22384ca23b819e457116ce208e96aed4032c6e7f27acecfd040d39b10b25a3198e1f21b6313c9d9b9ff6d9deda04dbac6b7de727d221460d7538c4b1b2e570a7227936e04937738bfa04dfd96d69cdd1fe337"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x60, 0xffffffff, 0xb0e4, 0x81}}, {{0x9, 0x5, 0x86, 0x1, 0x48, 0x10001, 0x226, 0x400}}, {{0x9, 0x5, 0x8b, 0xc, 0x0, 0xd9f7, 0x8, 0x7, [@generic={0x70, 0x6, "296636c3576db036c4d6329dcac0acc62d1104b4a21b0da550aa866a135b8ff6d4097cb80dd81684004709b14715d7c2848dbf6a92caba59bccb9c811f58253c6f93b1868a50ed7c10b70e95202a04933e6e2bc9c740ee1ebdb446f3543b6b7f954222839e195b84d1f9ec59656c"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x70, 0x4bf, 0x5, 0x9003}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x4, 0x2, 0x4, [@generic={0xcc, 0xb, "3c3d6c38a3a5245366d7e6fe296750175c0620da49d5498c82561654c1faa30248bad2a627fea1b5365e76fa911af57749cf41f93d5326f356467208f9c7b11ebf062b7cd263462383994d3fb46d89eced0b6e3fa81e33744600cf7534886a07ec7c150ab415f56f4ba63b0456d2399d5814a3748f54bfa965d58ff9f95720f24a922c76177370161c27e927c9b381a05ef2af819a7f50ead9a7a9ef069d892a931a11f32c65db7b7121abc8f28b281b24c099948c067f654d101af20956677b7617d962b7ebcbbc3fd7"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x0, 0x9, 0x96a, 0x3}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x310, 0x20, 0xc9, 0x3, 0x0, 0x50}, 0x12, &(0x7f00000007c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xefb8, 0x8c9e, 0xcbe1}]}, 0x2, [{0x8f, &(0x7f0000000800)={0x8f, 0x3, 0x810, "edd065b6806db8ae647cdd4779b8dda123892de24f28ddff1588984a3d3ff92eef7e3865d58b42d95e823ad15667bf5bff26a0f60a0a02de2af4599baacdc27c9a8521263e0012745f724e4924b65e9138fc4d693f51a7a5227d66dd2ae4ca7e466642285e94a4101db83912c6ada388c643757136741f3bce0432377f1d939b9fd2dfd2e18cc8bdc6e6e5"}}, {0xc3, &(0x7f00000008c0)={0xc3, 0x3, 0x145f, "42b3dcd18fd2a7d036c06784c918edd8e3d1dde920384c73a40ec5dcb6b2d6e8fb0c708c11a8a854cd40573aa6ee20c624666d5ef391681988c93d3e769cb1fef640f0073d5526f295aa9432391924202b63d6eaf92995417b87de4c228bc521a1c019751d9871214fc29f293e8b68e596bcc58704f3c91965e05631a1bb1f3c108cafb1be98eda7bb71d47f55f6559b1ad5a73c52f4d1eee3644c95c665378e3cdc5a3664a2151b2bb04cdd553cf4b804ae0526e5c7ffc3a96e77b3f9fb1c"}}]}) syz_usb_disconnect(r1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000a00)={0x7, "630703c66528a8e3af8e2aee01e0b482dccb1d90fe292679bbe5e117cfc713eb", 0x7, 0x2, 0x9f, 0x40, 0x2, 0x2, 0x1, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x0, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/usbmon0\x00', 0x40, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000b00)={0x18, 0xd, 0x1, {{0x0, 0x1, 0x8}, 0x8000}}, 0x18) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) modify_ldt$read(0x0, &(0x7f0000000bc0)=""/243, 0xf3) getxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=@random={'os2.', '\x00'}, &(0x7f0000000d40)=""/202, 0xca) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000e40)={0x2, "9f17455f8e2beb893c242bdb8fb2f482f5abe52575c96c319855196a0cd348f0", 0x2, 0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x0, 0x0, 0xffffffffffff3c21, 0x20, 0x6, 0x0, 0x1, 0x3, 0xfff, 0x53d, 0x1, 0x2, 0x1000, 0x2, 0x8001]}, &(0x7f0000000f80)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000fc0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x8b, 0x1, 0x2, 0x8, 0x2}, &(0x7f0000001080)=0x98) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000010c0)) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000001100)={0x5, "6d50d16d322f4b39c6e8ee9f45e530edf666de7fd14d5c32ac1eed250cc96278", 0x408, 0xf767, 0x7, 0x5, 0x5}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001180)={0x1, 0x0, [{0x80000007, 0x0, 0x3, 0x20, 0x200000000, 0x1ff, 0x5}]}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f00000011c0), 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000001200)=0x200, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001240)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001280)=""/239) [ 333.424948][T11815] QAT: Invalid ioctl [ 333.474859][T11815] QAT: Invalid ioctl [ 333.497478][T11812] pic_ioport_write: 30 callbacks suppressed [ 333.497493][T11812] kvm: pic: level sensitive irq not supported [ 333.509635][T11812] pic_ioport_write: 45 callbacks suppressed [ 333.509649][T11812] kvm: pic: single mode not supported [ 333.514792][T11809] kvm: pic: level sensitive irq not supported 13:04:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xb, 0x3) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x83000021, 0x40000000000031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f0000000080)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xbf4, 0x20000) [ 333.535405][T11812] kvm: pic: single mode not supported [ 333.566568][T11812] kvm: pic: level sensitive irq not supported [ 333.566797][T11809] kvm: pic: single mode not supported [ 333.584849][T11812] kvm: pic: single mode not supported [ 333.590368][T11812] kvm: pic: level sensitive irq not supported [ 333.600392][T11809] kvm: pic: single mode not supported [ 333.623299][T11812] kvm: pic: single mode not supported [ 333.653440][T11809] kvm: pic: level sensitive irq not supported [ 333.662283][T11809] kvm: pic: single mode not supported [ 333.663034][T11812] kvm: pic: single mode not supported [ 333.668562][T11809] kvm: pic: level sensitive irq not supported [ 333.693472][T11809] kvm: pic: single mode not supported [ 333.735247][T11812] kvm: pic: single mode not supported [ 333.798745][T11809] kvm: pic: level sensitive irq not supported 13:04:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='pids.max\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2d308119968d483a764a423a1a9c1646ac3a0b5da7119d31df6c5b07ef40af6df82ebc62e50cd305106396aab4e0ed87c7d1bd11f9ccf64df693947b6af9cb7ac984d80bb71a3d2c06b4b5e89a8fab02ff1d95a8b802a555fba2eace2c0deb42d63e69c6c78ef56c3d09cc564ddb26fb18322409ffd6f35ea4ab6b0b8a5976451cbf934ddc4e7939de7846f445393a8c84a262c6f5f11b16fbc67fe3c332a3e63dfa1b3de1eb684de5b7ac7d1a9966e6"], 0x23) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) [ 333.832894][T11812] kvm: pic: level sensitive irq not supported [ 334.046486][T11809] kvm: pic: level sensitive irq not supported 13:04:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/sockstat6\x00') r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x80, 0x480100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x7, r2, 0x1}) r3 = dup(r0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000000)={0x5, 0x81, 0x3, 0x9, 0x20}) sendfile(r3, r3, &(0x7f0000000040), 0x3ff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r3) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x0, 0x2000, 0x8, 0x9, 0x10}) shmget$private(0x0, 0x3000, 0x801, &(0x7f0000ffc000/0x3000)=nil) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f00000000c0)={0x7, 0x9, 0xfff, 0x2, 0xb564}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000400000400000088020c15eaa562275f7734291a28f6ca44eafdc24c47e79f9cbb548fb5601fbcb54b1fc7f511c3a209ba3805d09f1f4928358a6f3e99deb3f6669228731d6a0cf96d399076882e25db8ce7e38a5802f72be18e73e68ffa5e63f9dfd0fe"]) 13:04:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:04:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.047627][T11812] kvm: pic: level sensitive irq not supported [ 334.416317][T11826] IPVS: ftp: loaded support on port[0] = 21 13:04:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.643203][T11837] IPVS: ftp: loaded support on port[0] = 21 [ 334.998795][T11826] chnl_net:caif_netlink_parms(): no params data found [ 335.159949][T11837] chnl_net:caif_netlink_parms(): no params data found [ 335.251321][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.258699][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.269415][T11826] device bridge_slave_0 entered promiscuous mode [ 335.332922][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.340195][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.350344][T11826] device bridge_slave_1 entered promiscuous mode [ 335.359530][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.367091][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.377727][T11837] device bridge_slave_0 entered promiscuous mode 13:04:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.437639][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.445368][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.454565][T11837] device bridge_slave_1 entered promiscuous mode [ 335.502738][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.562781][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:04:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="656e73f0"], 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160558, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2a040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@mcast2, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x2, 0x800, 0x0, 0x5, 0x4000000, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.677884][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 13:04:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003c80)) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3aae000000237b3d030000000000f4949a2dee32b162640736b9becaba3de7b40100002000000000198ce17905d32ce504d9934946cfaeb92eca740508bd920cbedd794c1aaadcf66a628b3ccc057c2ae6b899d4048c0b557400000000000004000000008dc618c645156cf06371198949c448732aa545fedc856fdbf5c4c586fc7b0c1c7386e7b0c66f9b64adf111cb89c96e7ea5307264aaeb01368d1c65365b5a8dc7349d82334423ad1f7c2abfa7f7c7e1db9044f98763f0b0823d2069e92fa7327e4c47da7707c62911fe950405ca203822ab90f26385d409c6473fc2fc6c1c38b4ba6db281ead31c87e638364148709d358a5f5d8011c502365e79bcb7a71d81198aad55210511e1c7ec9293428f118c12ac1553ab3399c760a1532b57e13d7e1f548607bfeb2c13f352cf8ff9837168b5b15d3974b8233fd7"], 0x41a0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="64fff27cd434fcf4c1dfd82cfd0d41634002293c89a24199d56758f470ae4d7f817c9e1a821a26a0bed30b78bcb3807bd5d70ea32d62f6224bf7137ce645da51f42d74e2bd4fe4379a2e02076864da59430fa0545a05badbdf4abd121bedb656181a201de9b84dc56f15fa12799ad86d07888cbb4d931cb5c9df6f95a37bfdff21ffcf1116429f0101869e2ad2840f34b13abeaa470f39978324") setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x580, 0x4b0, 0x260, 0x378, 0x260, 0x378, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4, &(0x7f0000000100), {[{{@ipv6={@rand_addr="df63760c30ce510e47184236c9e9af7b", @empty, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xffffff00], 'lo\x00', 'ip6gretap0\x00', {0xff}, {}, 0x3b, 0x1, 0x4, 0x4}, 0x0, 0x228, 0x260, 0x0, {}, [@common=@inet=@set1={0x28, 'set\x00', 0x1, {{0x0, 0x3}}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x9, 0x80000000, 0x100, 0x0, 0x20, 0x6, [@empty, @empty, @mcast1, @dev={0xfe, 0x80, [], 0xb}, @mcast2, @ipv4={[], [], @empty}, @ipv4={[], [], @local}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, [], 0xe}, @mcast1, @local, @rand_addr="85f9b0c352ab97a617de295157f9846b", @dev={0xfe, 0x80, [], 0x21}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @remote], 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000, 0x400, 0x81}, {0x8, 0xb, 0x5}, {0x5, 0x242, 0x3}, 0x7, 0x8d}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1f, 0x1b, 0xffffffff}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@rand_addr="9017f2e1c97934f6034937ed70523a78", @empty, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xff], 'caif0\x00', 'nlmon0\x00', {0xff}, {0xff}, 0x2e, 0x7bc, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x0, 0x5, 0x1, [0x100000000, 0x7, 0xfffffffffffffbff, 0x9, 0xcc9c, 0x47a2, 0xb9, 0x1, 0x2, 0x8, 0x7, 0xe9c6, 0x179, 0x0, 0x0, 0x10000], 0xd}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c4) [ 335.738873][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.752618][T11826] team0: Port device team_slave_0 added [ 335.869751][T11826] team0: Port device team_slave_1 added [ 335.879612][T11837] team0: Port device team_slave_0 added [ 335.957205][T11837] team0: Port device team_slave_1 added [ 335.967479][T11851] ================================================================== [ 335.975605][T11851] BUG: KMSAN: uninit-value in ipv6_find_tlv+0x370/0x3c0 [ 335.982601][T11851] CPU: 1 PID: 11851 Comm: syz-executor.0 Not tainted 5.3.0-rc3+ #17 [ 335.990701][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.000769][T11851] Call Trace: [ 336.004126][T11851] dump_stack+0x191/0x1f0 [ 336.008491][T11851] kmsan_report+0x162/0x2d0 [ 336.013045][T11851] __msan_warning+0x75/0xe0 [ 336.017604][T11851] ipv6_find_tlv+0x370/0x3c0 [ 336.022252][T11851] ip6_find_1stfragopt+0x2b6/0x500 [ 336.027423][T11851] ip6_fragment+0x275/0x37d0 [ 336.032072][T11851] ? __ip6_finish_output+0x8f0/0x8f0 [ 336.037396][T11851] ? ip_vs_out+0x4d5/0x46b0 [ 336.041935][T11851] ? __msan_poison_alloca+0x1c0/0x270 [ 336.047356][T11851] ? nf_nat_ipv6_fn+0x15e/0x4f0 [ 336.052239][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.058268][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.064288][T11851] __ip6_finish_output+0x753/0x8f0 [ 336.069454][T11851] ip6_finish_output+0x2db/0x420 [ 336.074470][T11851] ip6_output+0x5d3/0x720 [ 336.078855][T11851] ? ip6_output+0x720/0x720 [ 336.083397][T11851] ? ac6_seq_show+0x200/0x200 [ 336.088116][T11851] ip6_local_out+0x164/0x1d0 [ 336.092762][T11851] ip6_push_pending_frames+0x215/0x4f0 [ 336.098280][T11851] rawv6_sendmsg+0x40da/0x5b10 [ 336.103185][T11851] ? sock_write_iter+0x101/0x650 [ 336.108148][T11851] ? __vfs_write+0xa2c/0xcb0 [ 336.112846][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.118880][T11851] ? udp_cmsg_send+0x5d0/0x5d0 [ 336.123683][T11851] ? compat_rawv6_ioctl+0x100/0x100 [ 336.128914][T11851] inet_sendmsg+0x2d8/0x2e0 [ 336.133469][T11851] ? inet_send_prepare+0x600/0x600 [ 336.138607][T11851] sock_write_iter+0x599/0x650 [ 336.143593][T11851] ? sock_read_iter+0x660/0x660 [ 336.148475][T11851] __vfs_write+0xa2c/0xcb0 [ 336.152972][T11851] vfs_write+0x481/0x920 [ 336.157283][T11851] ksys_write+0x265/0x430 [ 336.161668][T11851] __se_sys_write+0x92/0xb0 [ 336.166240][T11851] __x64_sys_write+0x4a/0x70 [ 336.170867][T11851] do_syscall_64+0xbc/0xf0 [ 336.175319][T11851] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 336.181226][T11851] RIP: 0033:0x459829 [ 336.185143][T11851] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.204883][T11851] RSP: 002b:00007f940b64cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.213410][T11851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 336.221400][T11851] RDX: 00000000000041a0 RSI: 00000000200001c0 RDI: 0000000000000003 [ 336.229424][T11851] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.237420][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b64d6d4 [ 336.245440][T11851] R13: 00000000004c9920 R14: 00000000004e0f20 R15: 00000000ffffffff [ 336.253478][T11851] [ 336.255820][T11851] Uninit was created at: [ 336.260110][T11851] kmsan_internal_poison_shadow+0x53/0xa0 [ 336.265939][T11851] kmsan_slab_alloc+0xaa/0x120 [ 336.270725][T11851] __kmalloc_node_track_caller+0xb55/0x1320 [ 336.276641][T11851] __alloc_skb+0x306/0xa10 [ 336.281092][T11851] __ip6_append_data+0x46ad/0x6060 [ 336.286225][T11851] ip6_append_data+0x3c2/0x650 [ 336.291010][T11851] rawv6_sendmsg+0x232e/0x5b10 [ 336.295808][T11851] inet_sendmsg+0x2d8/0x2e0 [ 336.300331][T11851] sock_write_iter+0x599/0x650 [ 336.305117][T11851] __vfs_write+0xa2c/0xcb0 [ 336.309553][T11851] vfs_write+0x481/0x920 [ 336.313814][T11851] ksys_write+0x265/0x430 [ 336.318157][T11851] __se_sys_write+0x92/0xb0 [ 336.322674][T11851] __x64_sys_write+0x4a/0x70 [ 336.327279][T11851] do_syscall_64+0xbc/0xf0 [ 336.331742][T11851] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 336.337638][T11851] ================================================================== [ 336.346318][T11851] Disabling lock debugging due to kernel taint [ 336.352496][T11851] Kernel panic - not syncing: panic_on_warn set ... [ 336.359104][T11851] CPU: 1 PID: 11851 Comm: syz-executor.0 Tainted: G B 5.3.0-rc3+ #17 [ 336.368478][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.378548][T11851] Call Trace: [ 336.381869][T11851] dump_stack+0x191/0x1f0 [ 336.386262][T11851] panic+0x3c9/0xc1e [ 336.390320][T11851] kmsan_report+0x2ca/0x2d0 [ 336.394866][T11851] __msan_warning+0x75/0xe0 [ 336.399402][T11851] ipv6_find_tlv+0x370/0x3c0 [ 336.404038][T11851] ip6_find_1stfragopt+0x2b6/0x500 [ 336.409207][T11851] ip6_fragment+0x275/0x37d0 [ 336.413817][T11851] ? __ip6_finish_output+0x8f0/0x8f0 [ 336.419138][T11851] ? ip_vs_out+0x4d5/0x46b0 [ 336.423693][T11851] ? __msan_poison_alloca+0x1c0/0x270 [ 336.429109][T11851] ? nf_nat_ipv6_fn+0x15e/0x4f0 [ 336.434072][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.440081][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.446091][T11851] __ip6_finish_output+0x753/0x8f0 [ 336.451245][T11851] ip6_finish_output+0x2db/0x420 [ 336.456239][T11851] ip6_output+0x5d3/0x720 [ 336.460611][T11851] ? ip6_output+0x720/0x720 [ 336.465133][T11851] ? ac6_seq_show+0x200/0x200 [ 336.469826][T11851] ip6_local_out+0x164/0x1d0 [ 336.474451][T11851] ip6_push_pending_frames+0x215/0x4f0 [ 336.479950][T11851] rawv6_sendmsg+0x40da/0x5b10 [ 336.484762][T11851] ? sock_write_iter+0x101/0x650 [ 336.489717][T11851] ? __vfs_write+0xa2c/0xcb0 [ 336.494459][T11851] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 336.500475][T11851] ? udp_cmsg_send+0x5d0/0x5d0 [ 336.505336][T11851] ? compat_rawv6_ioctl+0x100/0x100 [ 336.510546][T11851] inet_sendmsg+0x2d8/0x2e0 [ 336.515082][T11851] ? inet_send_prepare+0x600/0x600 [ 336.520207][T11851] sock_write_iter+0x599/0x650 [ 336.525010][T11851] ? sock_read_iter+0x660/0x660 [ 336.529882][T11851] __vfs_write+0xa2c/0xcb0 [ 336.534352][T11851] vfs_write+0x481/0x920 [ 336.538631][T11851] ksys_write+0x265/0x430 [ 336.542997][T11851] __se_sys_write+0x92/0xb0 [ 336.547530][T11851] __x64_sys_write+0x4a/0x70 [ 336.552138][T11851] do_syscall_64+0xbc/0xf0 [ 336.556589][T11851] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 336.562496][T11851] RIP: 0033:0x459829 [ 336.566399][T11851] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.586106][T11851] RSP: 002b:00007f940b64cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.594531][T11851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 336.602509][T11851] RDX: 00000000000041a0 RSI: 00000000200001c0 RDI: 0000000000000003 [ 336.610510][T11851] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.618495][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b64d6d4 [ 336.626477][T11851] R13: 00000000004c9920 R14: 00000000004e0f20 R15: 00000000ffffffff [ 336.635628][T11851] Kernel Offset: disabled [ 336.639968][T11851] Rebooting in 86400 seconds..