[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.536102][ T32] audit: type=1800 audit(1567715721.583:25): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.559159][ T32] audit: type=1800 audit(1567715721.603:26): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.602151][ T32] audit: type=1800 audit(1567715721.633:27): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2019/09/05 20:35:35 fuzzer started 2019/09/05 20:35:39 dialing manager at 10.128.0.26:34833 2019/09/05 20:35:39 syscalls: 2376 2019/09/05 20:35:39 code coverage: enabled 2019/09/05 20:35:39 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/05 20:35:39 extra coverage: enabled 2019/09/05 20:35:39 setuid sandbox: enabled 2019/09/05 20:35:39 namespace sandbox: enabled 2019/09/05 20:35:39 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/05 20:35:39 fault injection: enabled 2019/09/05 20:35:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/05 20:35:39 net packet injection: enabled 2019/09/05 20:35:39 net device setup: enabled 20:38:08 executing program 0: syzkaller login: [ 249.552656][T12297] IPVS: ftp: loaded support on port[0] = 21 [ 249.692290][T12297] chnl_net:caif_netlink_parms(): no params data found [ 249.748907][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.756225][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.764977][T12297] device bridge_slave_0 entered promiscuous mode [ 249.775185][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.782433][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.791115][T12297] device bridge_slave_1 entered promiscuous mode [ 249.824485][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.837149][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.869735][T12297] team0: Port device team_slave_0 added [ 249.879174][T12297] team0: Port device team_slave_1 added [ 250.166467][T12297] device hsr_slave_0 entered promiscuous mode [ 250.272786][T12297] device hsr_slave_1 entered promiscuous mode [ 250.452158][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.459403][T12297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.467191][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.474419][T12297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.555502][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.575780][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.588153][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.597989][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.613908][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 250.634161][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.653142][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.662250][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.669428][ T4887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.727686][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.736865][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.744150][ T4887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.755003][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.765136][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.774671][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.784658][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.796367][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.805304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.855004][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 20:38:10 executing program 0: 20:38:10 executing program 0: 20:38:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) 20:38:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00\xbd$\xcbW\xf305\x1c\x9e\xb7Xl\xe4\xafL\xf2G\x1fK\xc74\xb5niVU1\xfe\xe9\x8c\xa3]\xd8\xc1\xf3\x0e\xa2\xf2\xe0V|\xd2\x7f\xf6\x8dt\x0f\xebp\xa5\xeb\xb9\xe3\x14zzr\x04\xd9\xac+\x1b\x15\xc8\x9a\x9dQA\x00'/84, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000500), 0x1d6) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) 20:38:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000500), 0x12) 20:38:10 executing program 0: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1700000055000d0000000000fc07ff1b070404000d0000", 0x17) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x10, 0xfe1f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000080)={0x4, 0x81, 0x8, 'queue0\x00', 0x5}) 20:38:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}, 0xb) r1 = socket$packet(0x11, 0x100000000002, 0x300) sendmmsg(r1, &(0x7f0000000b40), 0x0, 0x0) 20:38:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x6040, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x401}]}) 20:38:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYPTR64, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRESOCT=r9, @ANYRES64=0x0, @ANYRES16=r2], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYPTR64, @ANYRES16=r2, @ANYRES16=r8], @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=r6], @ANYRES16=r7], @ANYBLOB="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"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xffffffffffffff8a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 252.148573][T12331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.183284][T12331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:38:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0x800) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000001c0007031dfffd946f610500070000001d0088a8ffff0000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) 20:38:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6gretap0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bb0c00000055a7374efe"}]}, 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000000)={0x8, 0x5ac, 0x4a38, 0x3, 0x3579}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r8, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r8, 0x96, "cf2e9a", "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"}}, 0x110) 20:38:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() tkill(r5, 0x1000000000016) write$P9_RGETLOCK(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a00000037010001070000effffffffffee531d5c16e3b276a00080000000000", @ANYRES32=r5, @ANYBLOB='\f\x00security(GPL'], 0x2a) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r6, r1, 0x0, 0x100000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = open(0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) write$P9_RSTATu(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11], 0xc) r12 = getegid() setregid(r10, r12) 20:38:12 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2aa2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x328, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x217}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x340}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53e6574e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff01}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e2d40f8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x120b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x107}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x328}}, 0x20008010) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000480)='sync\x00', 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x91, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = dup2(r0, r2) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000500)=""/95) sendto$rxrpc(r2, &(0x7f0000000580)="84597257f5d591a9551025bc6d7133b5354854d275c4a1d0b4b324144dd3d74c74317b779f41f0d997e3fd1b35ded891c692", 0x32, 0x40000, &(0x7f00000005c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @rand_addr="5754967c34b77ae143dcf43eaae9e09d", 0xd98}}, 0x24) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x4, 0x5}, 0x0, 0x0, &(0x7f00000006c0)={0x5, 0x8, 0xbea, 0x3}, &(0x7f0000000700)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=0x101}}, 0x10) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f00000008c0)={0xffffffffffffffff, 0x4, 0x200, 0x5, 0x10000, 0xfff, 0xc84, 0xbc, 0x2, 0x9, 0x0, 0x8, 0x80000000, 0x9, &(0x7f0000000880)=""/26, 0x0, 0x80000001, 0x8}) fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_dev$usb(&(0x7f0000000940)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000b80)={0x3, 0x0, &(0x7f0000000980)=""/69, &(0x7f0000000a00)=""/141, &(0x7f0000000ac0)=""/175, 0x4000}) inotify_add_watch(r3, &(0x7f0000000bc0)='./file0\x00', 0x300) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000c00)={'yam0\x00', 0x74e}) fchmod(r2, 0x1) r7 = timerfd_create(0x6, 0x0) write$binfmt_misc(r7, &(0x7f0000000c40)={'syz0', "1ebe15cbf43b98211c0d33919bcf29834dc5d862727065ebcb2512"}, 0x1f) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/vcs\x00', 0x20000, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm_plock\x00', 0x41e101, 0x0) write$ppp(r9, &(0x7f0000000d00)="e4b14738977c5b8574a97ec61a55f12ec657e62a10ee830d2f00d3c11724e7bf9cd0ec6905cce824c3bd68f29db78b13409f370d5843f466", 0x38) r10 = socket$l2tp(0x18, 0x1, 0x1) recvfrom(r10, &(0x7f0000000d40)=""/173, 0xad, 0x40002382, &(0x7f0000000e00)=@nl=@kern={0x10, 0x0, 0x0, 0x81008a}, 0x80) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, &(0x7f0000000e80)={0x0, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, {{0x2, 0x4e21, @rand_addr=0x7}}}, 0x108) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000001240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f0000001040)={0x1ac, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffb9}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr="62fb973ea288c285196f7e1b0ea66336", 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @local, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x1ac}}, 0x20000000) [ 253.470120][T12348] IPVS: ftp: loaded support on port[0] = 21 [ 253.614173][T12348] chnl_net:caif_netlink_parms(): no params data found [ 253.673977][T12348] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.681207][T12348] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.690064][T12348] device bridge_slave_0 entered promiscuous mode [ 253.700681][T12348] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.708555][T12348] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.717388][T12348] device bridge_slave_1 entered promiscuous mode [ 253.749792][T12348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.762765][T12348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.797034][T12348] team0: Port device team_slave_0 added [ 253.806517][T12348] team0: Port device team_slave_1 added [ 253.876828][T12348] device hsr_slave_0 entered promiscuous mode [ 253.912407][T12348] device hsr_slave_1 entered promiscuous mode [ 254.031779][T12348] debugfs: Directory 'hsr0' with parent '/' already present! [ 254.062810][T12348] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.070185][T12348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.078259][T12348] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.085526][T12348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.172969][T12348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.195444][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.208632][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.219476][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.234843][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 254.257597][T12348] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.276866][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.286371][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.293621][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.355647][T12348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.366502][T12348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.385585][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.394775][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.402022][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.412865][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.422804][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.432384][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.442418][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.453463][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.461982][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.497553][T12348] 8021q: adding VLAN 0 to HW filter on device batadv0 20:38:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xfffffffffffffffe}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x228100, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x40000000002) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x7417}) r3 = dup3(r2, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7, 0x9, 0x3, 0x8, 0xe, 0x4, 0x80000000, 0x6, 0x0, 0xc42, 0xa3, 0xffffffffffff0001}) write$UHID_INPUT(r3, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) 20:38:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000340)=0x28d) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r3, 0x1000, "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"}, &(0x7f0000000000)=0x1008) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x40) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 20:38:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) close(r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) close(r1) 20:38:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") fanotify_mark(0xffffffffffffffff, 0x114, 0x0, 0xffffffffffffffff, 0x0) 20:38:14 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x88300, 0x0) sendto$inet(r0, &(0x7f0000000380)="22ab47d0fa8bfc1ae609ab55376b127c258353e88196983f9d28cc5357aa1d496daec41f1bdced4ad4f483d1cb2fd48bd8b6e6a986d0bb9c7d92241366ce6e110d757f7f57356330781ee88e58cc9d8f4990994ba539afe750e1df7f816b67bb549b8c93eb3e53e407916cbfe493ee263b8b81cf9813a87dd721686a533b204240dacb039fd492bc4c2bb081a247705eac9bdab344fdb1fc998daa38", 0x9c, 0x4000000, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000240)=""/210, &(0x7f00000001c0)=0xd2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) mmap(&(0x7f00008fa000/0x4000)=nil, 0x4000, 0x1, 0x31, r3, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x200000000000011a, &(0x7f0000000040)}, 0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0xffffffffffffff4b) sendto$inet(r5, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) flock(r5, 0x2) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x3}) accept$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) 20:38:14 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700), 0x400000000000104, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x141000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="5747c89bf7e5729f258768d618995f29", 0x10) dup2(r3, r0) close(r2) 20:38:14 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700), 0x400000000000104, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x141000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="5747c89bf7e5729f258768d618995f29", 0x10) dup2(r3, r0) close(r2) 20:38:14 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x80, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40043, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000340)={0x0, 0x3, 0xffffffffffff99bf, 0x200020000000, 'syz0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x1, 0x60180) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000480)={r0}) r4 = socket$inet(0x10, 0x4000000000000002, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000004c0)={0xe9, 0x7, 0x7}) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xffffffffffffff30) socket$inet(0x2, 0x7, 0x7ff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@remote, @in=@empty, 0x4e24, 0xbe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6c, r5, r6}, {0x6, 0x800, 0x0, 0xffff, 0x2, 0x6, 0x2, 0x8}, {0x7ff, 0x200, 0x3133, 0x3}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x0, 0x3f, 0xc9f, 0x8, 0xff}}, 0xe8) 20:38:14 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700), 0x400000000000104, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x141000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000000c0)="5747c89bf7e5729f258768d618995f29", 0x10) dup2(r3, r0) close(r2) [ 255.818645][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:38:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x26}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x1) [ 256.046055][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:38:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x9, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x406, r3) r6 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xee4c, 0x10400) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000300)={0xfffffffffffffffe, 0xc, [0x2, 0x100000001, 0xffffffffffff8000]}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timerfd_gettime(r5, &(0x7f0000000080)) r7 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r8, 0x2202, 0x0) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000040)={0x3, 0x1, 0x8, 0x2, 0x5, 0xb4, 0x8, 0xabce, 0x1, 0x9, 0x0, 0x3ff, 0x20, 0x100000001}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/185, 0xfffffe5c}], 0x1, 0xe) syz_open_dev$adsp(&(0x7f0000000000)='1\x90\b\xd2\xf0oO\xc8\t\x00', 0x100, 0x103804) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 20:38:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = socket(0x10, 0x3, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100400, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000140)={0x10, 0x8, &(0x7f00000000c0)="6c80c322a44e5d6e25483e8a3f4db77651c0c0a23c72d1075e3bc63d3ff62e3fe626ea2a31e52ddeae9fc84162c7b2eb679f023c9cf643171fc1b63dd0005c0519fa6cd348ab1d47364e07abbe6f2dadfb85fbc5a0d9fd3a7b8b44a3751c936249bde7477aed17ce2b6a157cd8a45eddd1da6d0120a80495ee47d168", {0x0, 0x4b, 0x41564e57, 0x1, 0x2, 0x5, 0x10, 0x3}}) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x7, 0x8, 0x200, 0x0, 0x8, 0x402, 0x4f, 0x2b29, r4}, &(0x7f00000002c0)=0x20) write(r2, &(0x7f00000001c0)="240000004e001f00ff07f4f9002304000aa19012eb2bcf37f404f5110c00010002010002", 0x24) socket$inet_udplite(0x2, 0x2, 0x88) [ 256.242927][T12396] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:38:15 executing program 1: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000014ff8)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x7ff, 0x3b, "2bd44c85865e1ecd20292338aa3754d5fce33a8dd4d3e06e552a891c2c87be0c4729e38a7ea6ded71c2681482f61affa154e9696ded3aa5cdd96a7"}) r2 = memfd_create(&(0x7f0000000200)='\xae\'\xd1\x93E=i\x86\a\xf1\x17\xfa\x861\x13uc\xb2\x06\x93i\x878\xb1\xf0\x8c\x8e\xd6\xdb*\xa1@Y\x02\x9eA\xcf7\xc7\\^\xcb(\xb1L\x1f!\x16\xd3D;\bh\xb0\xce\x15Y\x8d\x9f\xad\x87C\xc6A\x03.\xd8\nH\x9f0', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 256.339782][T12403] QAT: Invalid ioctl [ 256.371071][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 20:38:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 256.442663][T12403] QAT: Invalid ioctl [ 256.448340][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 20:38:15 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$rfkill(r0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x80000000000003a) 20:38:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x0, @broadcast}, 0x10, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') 20:38:15 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa4, 0x0, &(0x7f0000000000)) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) 20:38:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="f361dab5ec12", @random="6b22be99679b"]}) 20:38:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) mq_open(&(0x7f0000000080)='syz_tun\x00', 0x80, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0xffffffffffffffbb, 0x3, 0x7, 0x100000000, 0xcfb, 0x81}) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r4, 0x6b, 0x3}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r5, 0x2) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x2060710e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) accept4(r7, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x80, 0x80000) [ 256.960486][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.986360][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:38:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) timer_delete(r2) r3 = socket$inet(0x2, 0x1, 0xbe) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 20:38:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x7b22e317f1bbdad4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getneigh={0x14, 0x1e, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5ff36121f75dc0ab}, 0x82) ioprio_get$uid(0x0, r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x10}]}}}]}, 0x3c}}, 0x0) 20:38:16 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLERRORu(r1, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffa, 0x20401) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x412, 0x4) 20:38:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007a80)=[{{&(0x7f0000000080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1, &(0x7f00000001c0)}, 0x100000000}, {{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f0000000340)}, 0x80000003}, {{&(0x7f0000001480)=@rc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001500)=""/34, 0x22}, {&(0x7f0000001540)=""/120, 0x78}, {&(0x7f00000015c0)=""/121, 0x79}], 0x3, &(0x7f0000001680)=""/208, 0xd0}, 0x81}, {{&(0x7f0000001780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000004cc0)}, 0x5}, {{&(0x7f0000004d80)=@nl=@unspec, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e00)=""/123, 0x7b}, {&(0x7f0000004e80)=""/33, 0x21}, {&(0x7f0000004ec0)=""/77, 0x4d}, {&(0x7f0000004f40)}, {&(0x7f0000004f80)=""/113, 0x71}], 0x5, &(0x7f0000005080)=""/120, 0x78}, 0x800}, {{0x0, 0x0, &(0x7f0000006440), 0x0, &(0x7f00000064c0)=""/76, 0x4c}, 0x6}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f0000006540)=""/36, 0x24}, {&(0x7f0000006580)=""/113, 0x71}, {&(0x7f0000006600)=""/62, 0x3e}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000007640)=""/203, 0xcb}], 0x5, &(0x7f00000077c0)=""/88, 0x58}, 0x20}, {{&(0x7f0000007840)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007a40)=[{&(0x7f00000078c0)=""/248, 0xf8}, {&(0x7f00000079c0)=""/21, 0x15}, {&(0x7f0000007a00)=""/26, 0x1a}], 0x3}, 0x6}], 0x8, 0x100, &(0x7f0000007c80)={0x0, 0x1c9c380}) r2 = bpf$MAP_CREATE(0x0, &(0x7f000000bfd4)={0x1, 0x1f, 0x2, 0x20000000000001, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000200), &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f00000001c0)="92", &(0x7f0000000380)=""/4096}, 0x18) 20:38:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='#\\.system\x00', &(0x7f0000000040)="2c3d0e848eb37c6e4f54212b28ffba3a2166e6425c60cd1ec1ba79991833b66df92950ad9d4c4f948757da92ea5a1abea3ef35305669e7c03fd207311cab527a24965a9efa84d3129a039a64dafccd659bf9d73e5d68534038c9082accb02a3fa51e95e881d527638ba68f9f002e57411d60f850ca336b", 0x77) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6erspan0\x00', 0x1000}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x321, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x3c}}, 0x0) 20:38:17 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000000, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8dea2b95"}, 0x0, 0x0, @planes=0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000003c0)={0x83, 0x1e0, 0xc6, 0x7fffffff, 0x5, 0x9}) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r4, 0x2) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000300)={0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getrlimit(0x2, &(0x7f0000000340)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8000, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x3, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0xe, 0x8, 0x80000000}, &(0x7f0000000180)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xffffffff}}, 0x10) 20:38:18 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/80, 0x50}], 0x4}, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast2, 0x9, 0x2, 0x2, 0x3, 0x7, 0xffffffff}, 0x20) r1 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x8000) getpeername$inet6(r1, &(0x7f0000000400), &(0x7f0000000440)=0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000480)={0xfffffffffffffff8, 0x80000001, 0x7, 'queue1\x00', 0x80000001}) syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x40, 0x40400) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x28400, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000640)=r3) r5 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0x0, 0x101000) write$cgroup_int(r5, &(0x7f00000006c0)=0x1, 0x12) syz_open_dev$media(&(0x7f0000000700)='/dev/media#\x00', 0x400000, 0x80) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000780)={@rand_addr="51015e7f4224da25edaaaec161da2259", 0xb00, 0x2, 0x3, 0x2, 0x9458, 0x101}, 0x20) socket$bt_rfcomm(0x1f, 0x69e1377b83f96efb, 0x3) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000007c0)=""/71) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000840)={0x4, 0x0, 0x2, 0x1, 'syz0\x00', 0x8}) syz_extract_tcp_res$synack(&(0x7f0000000880), 0x1, 0x0) r7 = dup(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x15202000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0x3, 0x3, 0xd65}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) r9 = msgget(0x3, 0xc0) msgctl$IPC_INFO(r9, 0x3, &(0x7f0000000a00)=""/182) r10 = open(&(0x7f0000000ac0)='./file0\x00', 0x20000, 0xea) getresuid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) getgroups(0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) lstat(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000e00)={0x200, 0x0, 0x7, [{{0x4, 0x3, 0x10000, 0x0, 0x5, 0x9, {0x5, 0x5, 0x5, 0x401, 0x2, 0x9, 0x6, 0x80, 0xffffffffffffff00, 0x1, 0x400, r11, 0xee00, 0x90f, 0x7ff}}, {0x3, 0x80000001, 0x7, 0x8, 'queue1\x00'}}, {{0x4, 0x1, 0x2, 0x100, 0x6, 0x4, {0x0, 0x8, 0x7, 0x20, 0x1, 0x400, 0x100000000, 0x1c00000, 0x8, 0xfff, 0x80000001, r4, r12, 0x80000001, 0x8000}}, {0x2, 0x6, 0xa, 0x4, '/dev/dsp#\x00'}}, {{0x4, 0x3, 0x7, 0xfffffffffffffffd, 0x10000, 0x5, {0x1, 0x36, 0x400, 0x9, 0x8, 0x538, 0xfffffffffffff000, 0x6, 0x613, 0x0, 0x775ecf82, r13, r14, 0x8, 0x30}}, {0x4, 0xfffffffffffff800, 0xb, 0xffa6, '/dev/loop#\x00'}}]}, 0x200) 20:38:18 executing program 1: socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400270019005f0014f9f407000904000ad8020000020000000000000800010000000000", 0x24) [ 258.974814][ C0] ================================================================== [ 258.983255][ C0] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 258.990912][ C0] CPU: 0 PID: 12294 Comm: syz-fuzzer Not tainted 5.3.0-rc7+ #0 [ 258.998490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.008734][ C0] Call Trace: [ 259.012036][ C0] [ 259.015012][ C0] dump_stack+0x191/0x1f0 [ 259.019375][ C0] kmsan_report+0x162/0x2d0 [ 259.023895][ C0] __msan_warning+0x75/0xe0 [ 259.028416][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.033809][ C0] ? __alloc_skb+0x215/0xa10 [ 259.038436][ C0] __alloc_skb+0x215/0xa10 [ 259.042961][ C0] aoecmd_cfg+0x205/0xa80 [ 259.047304][ C0] discover_timer+0x86/0xa0 [ 259.051842][ C0] call_timer_fn+0x232/0x530 [ 259.056426][ C0] ? skbfree+0x4a0/0x4a0 [ 259.060682][ C0] __run_timers+0xcdc/0x11a0 [ 259.065634][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.071704][ C0] ? skbfree+0x4a0/0x4a0 [ 259.075962][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.082022][ C0] run_timer_softirq+0x2d/0x50 [ 259.086775][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.091778][ C0] __do_softirq+0x4a1/0x83a [ 259.096314][ C0] irq_exit+0x230/0x280 [ 259.100474][ C0] exiting_irq+0xe/0x10 [ 259.104634][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.109997][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.115090][ C0] [ 259.118118][ C0] RIP: 0010:kmsan_slab_free+0xac/0x100 [ 259.124004][ C0] Code: 00 b9 01 00 00 00 e8 83 c9 ff ff 65 ff 0d b0 e7 fe 7d 65 8b 05 a9 e7 fe 7d 85 c0 75 2e e8 fc 18 38 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e [ 259.143685][ C0] RSP: 0018:ffff8880ad9bfae8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 259.152085][ C0] RAX: 0000000000000000 RBX: ffff88812f819180 RCX: 0000000000000007 [ 259.162142][ C0] RDX: 0000000000000006 RSI: ffffd0ffffffffff RDI: ffff8881023845a0 [ 259.170129][ C0] RBP: ffff8880ad9bfb18 R08: ffffea000000000f R09: ffff88812fffb000 [ 259.178090][ C0] R10: 000000000000000b R11: ffffffff8182a660 R12: 0000000000000000 [ 259.186228][ C0] R13: 0000000000000000 R14: ffff888102384588 R15: 0000000000000246 [ 259.194716][ C0] ? stack_trace_save+0x1b0/0x1b0 [ 259.199760][ C0] kmem_cache_free+0x2d1/0x2b70 [ 259.204692][ C0] ? security_file_free+0x1c6/0x210 [ 259.210088][ C0] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 259.216257][ C0] ? refcount_dec_and_test_checked+0x14c/0x210 [ 259.222629][ C0] security_file_free+0x1c6/0x210 [ 259.227689][ C0] __fput+0x8b2/0xba0 [ 259.231822][ C0] ____fput+0x37/0x40 [ 259.235814][ C0] ? fput_many+0x2a0/0x2a0 [ 259.240376][ C0] task_work_run+0x22e/0x2a0 [ 259.245145][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 259.250687][ C0] syscall_return_slowpath+0x90/0x610 [ 259.256075][ C0] do_syscall_64+0xe2/0xf0 [ 259.260697][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.266780][ C0] RIP: 0033:0x47fd44 [ 259.270686][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 259.290294][ C0] RSP: 002b:000000c4364216c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 259.298699][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000047fd44 [ 259.306661][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000018 [ 259.314619][ C0] RBP: 000000c436421710 R08: 0000000000000000 R09: 0000000000000000 [ 259.322614][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000475d03 [ 259.330601][ C0] R13: 00000000000000f2 R14: 0000000000000032 R15: 0000000000000000 [ 259.338976][ C0] [ 259.341345][ C0] Uninit was stored to memory at: [ 259.346556][ C0] kmsan_internal_chain_origin+0xcc/0x150 [ 259.352281][ C0] __msan_chain_origin+0x6b/0xe0 [ 259.357221][ C0] ___slab_alloc+0x1dbc/0x1fb0 [ 259.361972][ C0] kmem_cache_alloc_node+0x769/0xe70 [ 259.367256][ C0] __alloc_skb+0x215/0xa10 [ 259.371671][ C0] aoecmd_cfg+0x205/0xa80 [ 259.375990][ C0] discover_timer+0x86/0xa0 [ 259.380485][ C0] call_timer_fn+0x232/0x530 [ 259.385061][ C0] __run_timers+0xcdc/0x11a0 [ 259.389823][ C0] run_timer_softirq+0x2d/0x50 [ 259.394577][ C0] __do_softirq+0x4a1/0x83a [ 259.399084][ C0] irq_exit+0x230/0x280 [ 259.403289][ C0] exiting_irq+0xe/0x10 [ 259.407588][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.412959][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.417983][ C0] kmsan_slab_free+0xac/0x100 [ 259.422689][ C0] kmem_cache_free+0x2d1/0x2b70 [ 259.427542][ C0] security_file_free+0x1c6/0x210 [ 259.432900][ C0] __fput+0x8b2/0xba0 [ 259.436876][ C0] ____fput+0x37/0x40 [ 259.440844][ C0] task_work_run+0x22e/0x2a0 [ 259.445425][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 259.451129][ C0] syscall_return_slowpath+0x90/0x610 [ 259.456488][ C0] do_syscall_64+0xe2/0xf0 [ 259.460979][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.466855][ C0] [ 259.469179][ C0] Uninit was created at: [ 259.473414][ C0] kmsan_internal_poison_shadow+0x58/0xb0 [ 259.479118][ C0] kmsan_slab_free+0x8d/0x100 [ 259.483877][ C0] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 259.489231][ C0] napi_consume_skb+0x593/0x5d0 [ 259.494172][ C0] free_old_xmit_skbs+0x1a1/0x450 [ 259.499182][ C0] virtnet_poll_tx+0x24c/0x4c0 [ 259.503979][ C0] net_rx_action+0x74b/0x1950 [ 259.508739][ C0] __do_softirq+0x4a1/0x83a [ 259.513231][ C0] irq_exit+0x230/0x280 [ 259.517368][ C0] do_IRQ+0x20d/0x3a0 [ 259.521334][ C0] ret_from_intr+0x0/0x33 [ 259.525642][ C0] ================================================================== [ 259.533695][ C0] Disabling lock debugging due to kernel taint [ 259.539852][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 259.546434][ C0] CPU: 0 PID: 12294 Comm: syz-fuzzer Tainted: G B 5.3.0-rc7+ #0 [ 259.555346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.565393][ C0] Call Trace: [ 259.568676][ C0] [ 259.571529][ C0] dump_stack+0x191/0x1f0 [ 259.575902][ C0] panic+0x3c9/0xc1e [ 259.579811][ C0] kmsan_report+0x2ca/0x2d0 [ 259.584329][ C0] __msan_warning+0x75/0xe0 [ 259.588833][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.594112][ C0] ? __alloc_skb+0x215/0xa10 [ 259.598713][ C0] __alloc_skb+0x215/0xa10 [ 259.603129][ C0] aoecmd_cfg+0x205/0xa80 [ 259.607459][ C0] discover_timer+0x86/0xa0 [ 259.611964][ C0] call_timer_fn+0x232/0x530 [ 259.616552][ C0] ? skbfree+0x4a0/0x4a0 [ 259.620788][ C0] __run_timers+0xcdc/0x11a0 [ 259.625378][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.631520][ C0] ? skbfree+0x4a0/0x4a0 [ 259.635849][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.641819][ C0] run_timer_softirq+0x2d/0x50 [ 259.646658][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.652456][ C0] __do_softirq+0x4a1/0x83a [ 259.657031][ C0] irq_exit+0x230/0x280 [ 259.661179][ C0] exiting_irq+0xe/0x10 [ 259.665425][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.670784][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.675901][ C0] [ 259.678828][ C0] RIP: 0010:kmsan_slab_free+0xac/0x100 [ 259.684274][ C0] Code: 00 b9 01 00 00 00 e8 83 c9 ff ff 65 ff 0d b0 e7 fe 7d 65 8b 05 a9 e7 fe 7d 85 c0 75 2e e8 fc 18 38 ff 4c 89 7d d0 ff 75 d0 9d <65> 48 8b 04 25 28 00 00 00 48 3b 45 e0 75 0b 48 83 c4 18 5b 41 5e [ 259.703872][ C0] RSP: 0018:ffff8880ad9bfae8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 259.712281][ C0] RAX: 0000000000000000 RBX: ffff88812f819180 RCX: 0000000000000007 [ 259.720241][ C0] RDX: 0000000000000006 RSI: ffffd0ffffffffff RDI: ffff8881023845a0 [ 259.728209][ C0] RBP: ffff8880ad9bfb18 R08: ffffea000000000f R09: ffff88812fffb000 [ 259.736177][ C0] R10: 000000000000000b R11: ffffffff8182a660 R12: 0000000000000000 [ 259.744154][ C0] R13: 0000000000000000 R14: ffff888102384588 R15: 0000000000000246 [ 259.752165][ C0] ? stack_trace_save+0x1b0/0x1b0 [ 259.757198][ C0] kmem_cache_free+0x2d1/0x2b70 [ 259.762052][ C0] ? security_file_free+0x1c6/0x210 [ 259.767243][ C0] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 259.773311][ C0] ? refcount_dec_and_test_checked+0x14c/0x210 [ 259.779484][ C0] security_file_free+0x1c6/0x210 [ 259.785572][ C0] __fput+0x8b2/0xba0 [ 259.789571][ C0] ____fput+0x37/0x40 [ 259.793549][ C0] ? fput_many+0x2a0/0x2a0 [ 259.797961][ C0] task_work_run+0x22e/0x2a0 [ 259.802642][ C0] prepare_exit_to_usermode+0x39d/0x4d0 [ 259.808213][ C0] syscall_return_slowpath+0x90/0x610 [ 259.813588][ C0] do_syscall_64+0xe2/0xf0 [ 259.818010][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.823891][ C0] RIP: 0033:0x47fd44 [ 259.827802][ C0] Code: ff ff cc cc cc cc e8 9b 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 45 31 d2 45 31 c0 45 31 c9 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 259.847745][ C0] RSP: 002b:000000c4364216c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 259.856240][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000047fd44 [ 259.864212][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000018 [ 259.872178][ C0] RBP: 000000c436421710 R08: 0000000000000000 R09: 0000000000000000 [ 259.880153][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000475d03 [ 259.888124][ C0] R13: 00000000000000f2 R14: 0000000000000032 R15: 0000000000000000 [ 259.897894][ C0] Kernel Offset: disabled [ 259.902896][ C0] Rebooting in 86400 seconds..