Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2019/08/06 03:21:13 fuzzer started 2019/08/06 03:21:19 dialing manager at 10.128.0.26:46627 2019/08/06 03:21:19 syscalls: 2367 2019/08/06 03:21:19 code coverage: enabled 2019/08/06 03:21:19 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/06 03:21:19 extra coverage: enabled 2019/08/06 03:21:19 setuid sandbox: enabled 2019/08/06 03:21:19 namespace sandbox: enabled 2019/08/06 03:21:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/06 03:21:19 fault injection: enabled 2019/08/06 03:21:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/06 03:21:19 net packet injection: enabled 2019/08/06 03:21:19 net device setup: enabled 03:23:44 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syzkaller login: [ 246.599143][T11758] IPVS: ftp: loaded support on port[0] = 21 [ 246.738507][T11758] chnl_net:caif_netlink_parms(): no params data found [ 246.795653][T11758] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.802906][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.811693][T11758] device bridge_slave_0 entered promiscuous mode [ 246.822049][T11758] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.829247][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.838016][T11758] device bridge_slave_1 entered promiscuous mode [ 246.871096][T11758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.883975][T11758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.916868][T11758] team0: Port device team_slave_0 added [ 246.926097][T11758] team0: Port device team_slave_1 added [ 247.046673][T11758] device hsr_slave_0 entered promiscuous mode [ 247.142596][T11758] device hsr_slave_1 entered promiscuous mode [ 247.312595][T11758] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.319821][T11758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.327625][T11758] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.334853][T11758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.415283][T11758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.435836][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.447420][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.457509][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.473281][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 247.493410][T11758] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.510495][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.520059][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.527303][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.577222][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.586735][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.593974][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.604485][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.614582][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.624239][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.644992][T11758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.657467][T11758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.690555][T11758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.730348][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.739593][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.022689][ C0] hrtimer: interrupt took 54146 ns 03:23:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) r1 = dup(r0) write$FUSE_ATTR(r1, &(0x7f0000000100)={0x78}, 0x78) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227c, 0x0) 03:23:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x1276, 0x0) 03:23:46 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:23:47 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:23:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002940)={0x15, 0x10, 0x3, 0x4}, 0x3c) 03:23:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) r1 = dup(r0) read(r0, 0x0, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000100)={0x78}, 0x78) 03:23:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000000000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x8, [0x1b, 0x0, 0x1b, 0x4800], [0xc1, 0xc0000103]}) [ 250.690713][T11793] IPVS: ftp: loaded support on port[0] = 21 [ 250.774954][T11796] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.876335][T11793] chnl_net:caif_netlink_parms(): no params data found [ 250.955927][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.963554][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.972404][T11793] device bridge_slave_0 entered promiscuous mode [ 250.989040][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.996345][T11793] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:49 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 251.005121][T11793] device bridge_slave_1 entered promiscuous mode [ 251.037765][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.053437][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.105203][T11793] team0: Port device team_slave_0 added [ 251.121056][T11793] team0: Port device team_slave_1 added 03:23:49 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 03:23:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x103003) pipe2(&(0x7f0000000000), 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) [ 251.218046][T11793] device hsr_slave_0 entered promiscuous mode [ 251.253663][T11793] device hsr_slave_1 entered promiscuous mode [ 251.302796][T11793] debugfs: Directory 'hsr0' with parent '/' already present! [ 251.360584][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.367830][T11793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.375646][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.382918][T11793] bridge0: port 1(bridge_slave_0) entered forwarding state 03:23:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x105400, 0x0) io_setup(0x2, &(0x7f00000002c0)=0x0) r3 = msgget$private(0x0, 0x114) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000080)=""/60) io_submit(r2, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) [ 251.469447][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.504146][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.524928][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.540496][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.552774][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 251.573859][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.607867][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.617007][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.624279][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.633198][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.642269][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.649432][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.695820][T11793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.706536][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.726345][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.736769][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.746494][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.756171][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.790767][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.815783][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.824693][ T2894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:23:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x6100, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x840, 0xdb3, {0x0, 0x7530}, {}, {0x4, 0x9, 0x2, 0x9e0}, 0x1, @can={{0x0, 0x4, 0x1000, 0xf}, 0x6, 0x1, 0x0, 0x0, "6d3024bcb9fb3ad3"}}, 0x48}}, 0x4010) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) r3 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)) 03:23:50 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000780)='./file0\x00') r1 = creat(&(0x7f0000000000)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0xa400295c) symlink(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)='./control\x00') ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000100)=0x889) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file1\x00') 03:23:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x29d) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000780)='/dev/snapshot\x00', 0x100, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/qat_adf_ctl\x00', 0xc0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\xa6\x9fUp\xc2\xec\x00', 0x0}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000600)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000680)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r6, 0x403, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000001c0)={"b34abece47e7fa73e3cd2e73c5500575cb833a86d6e3d97414f3111cb1a3d0b54a873d40b755a2f40da320950629a023b84467f70f284b15e5e0152367ee3bdb4c715b9f221b72a633e1691da5d9f81161b3fac2e2f3d7424e134fc1032ce2826b64561aecbc86ab17599f24a4565e90029c4fde35b7b6c8496b71bdf1ed49fa5842431c0228d49ece1fc572ba0d3a1ba40c90d5fec8d069fa0043f205ce890a272d5a360dc9bd2141313be3bfcd9007849bae9ef74109cded0215049062a989aa6057ad4c999c367957847fc92e08b763d9bb492adcea799c521417b03ae8b547617b1f342f373dcbefc2a8d40da3985051eb75458a4f6433454acb48c575bd41b33eea5f38d8dcbabc0e828476e9537132dd0c049ab77714c2cf8080fb64d10988fd472006589d30aa34a65b889fd541cdafcaed461b79ec1dd33524d3541de0d3da9b1cd92a307485720565d7f65ca9df9d8567c47874a92ade589fc3db19085ec59388b95dbf6031e46a4fb20190036c1cffc61088fba1e7cd23cc6fb65ca96729c800c2dad6fdda23fff88c7d679c3ab81b3407d6f08d1a33f89553fd328781df25932a9ccd6debbac5a2f0a0f5a30670c362182025432f4170146d7954813a674ebba102e07fac8e4a90b9e80d955993a8aaa883a27f2db96ec1666ca513915a59037020856aa0cd26e80b6b055e17e4e7a9cac5e504afa5b739a7339460212b8459778430ce420e84a2abb525aa5db4dbb1e880dd849ca1f54ce8339755d7355666ece98743f4033c112e281b9dd90c056f8f467b89b7915cf7cbdb1d829a6077de83df4e93bcf28a59061f555210911f7169c70fe24d0a9066b775a9a768aee56d61375b41d79ea3a8a439a69d43e49b77622e72b2724e960e20674c1740add4556904969ec17dd34c6c936ea1115e38f14bd8c0b612fe8bee3467cad8f8dada36a6ad09d1f737d9d28d655fe58144c1186a6debe0bcadbef185720c59f9215c7fe8c4377fe253e6c672fd7bf0d0199d0571694b4bf16a7f37d9b3414fd87595d17e4751c2459f737bfb8111b2a3665822d4d91b86ae92d3f471169233b84ef2b167eb06173f936585c9aeb82f0ec023c663457132e4469ee64b346085010b01744e1ffa35081c6b2355a0967011205f32516686da580cb477fae3707d19f94134a6cc116a4b5f656a9a632b6f6d0fa5012ee81394de883a4fcec3610990faf1584a4682cbf1cf8f07500ae7db8574b27f24d94c1e11581f9f0d76422f9a8a05a2cf005f1ce718a91eadf5a919c60b9b1a71e2f1b371f7a1a6a18a73427bad7b111c7c4d4529186362e49111aa767e419faf1a5633b04fd79dada76dbdaa15cc7a7629cd1cc526fd70f315767976f9e76d08e4651f4c0620557ccfa7e319991a5fe04767266ef0630bb540507c07f4aa9ca76ed46bf63e35c7792e09"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) set_robust_list(&(0x7f00000005c0)={&(0x7f0000000000), 0x6, &(0x7f00000000c0)={&(0x7f0000000040)}}, 0x18) 03:23:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000000000141042, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43}, 0x43) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)) [ 252.280401][T11832] kvm: pic: single mode not supported [ 252.294809][T11832] kvm: pic: level sensitive irq not supported [ 252.300757][T11832] kvm: pic: level sensitive irq not supported [ 252.330761][T11832] kvm: pic: level sensitive irq not supported [ 252.338508][T11832] kvm: pic: level sensitive irq not supported [ 252.347367][T11832] kvm: pic: single mode not supported [ 252.353710][T11832] kvm: pic: level sensitive irq not supported [ 252.360554][T11832] kvm: pic: level sensitive irq not supported [ 252.371601][T11832] kvm: pic: single mode not supported [ 252.378044][T11832] kvm: pic: level sensitive irq not supported [ 252.393604][T11832] kvm: pic: single mode not supported [ 252.415255][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 252.415288][ T30] audit: type=1800 audit(1565061830.477:31): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="ramfs" ino=25337 res=0 03:23:50 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x8001000001c, &(0x7f0000000040)=""/39, &(0x7f00000000c0)=0x27) 03:23:50 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40046109, &(0x7f0000000300)) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x40046109, &(0x7f0000000300)) r3 = getgid() r4 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x3, &(0x7f00000000c0)=[r3, r4, r5]) 03:23:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200500, 0x0) fsmount(r0, 0x1, 0x80) 03:23:50 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x100000001, 0x10001) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x3, 0x1000, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8c1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept(r3, &(0x7f0000000100)=@llc, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x4, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 03:23:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffff7fffff7, 0x602800) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 252.929072][T11854] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 03:23:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000800000001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000014000702000000000000000002ff0000000000cefa89506bf836ebb55d7628dde870390761ffe3ac3a96f267e015825744c775f9dc4fe6e7b3941dd83322dcbce5636592f5840f3444f651de917e4c4e62904398e879b507c8c30cf50453f439fc0e5ab004afc18b6c6724c5fad277", @ANYRES32], 0x24c}}, 0x0) r2 = dup2(r0, r1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r3}) 03:23:51 executing program 0: r0 = dup(0xffffffffffffffff) pidfd_send_signal(r0, 0x3, &(0x7f0000000040)={0x22, 0x9, 0x7}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882) timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x15, &(0x7f0000000100)) [ 253.083862][T11863] Unknown ioctl 1074025675 03:23:51 executing program 1: r0 = epoll_create1(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x32) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2a0000010}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1709, 0x0, 0x0, 0x0) 03:23:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6919, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r3, 0x422, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7c8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7b}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x20040004) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x11) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) 03:23:51 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0xfffffffffffffffe, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x200000, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) sendto$packet(r1, &(0x7f00000002c0)="cb2ce902036954db7a6baf41c6a7fd2f007d40f1c50b6fc963278cc54e5f56dbaad20c22d51e588818e5dad4ebf5f0468aa04002e85cff9baa5f685e340002ac02da6cdc7dba64390d9710a6f2dc10db90c67384a8d59463a17780017f68c09a835fb2007cf51af891259502da8956ce2332050a6b0d3721dbd31190665e2658332453097e3d726751ca74994554bc14d0dde30600e112c438ec727576484e360f917d2fcfee6552de3c7bdb60e54b6e2902da3268c513eb3392c065130e9d8eb174c6b64146d190", 0xc8, 0x4, &(0x7f0000000180)={0x11, 0xff, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000200)=[{r0}, {r3}], 0x2, &(0x7f0000000280), 0x0, 0x0) 03:23:51 executing program 1: r0 = socket(0x840000000015, 0x805, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x1c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1}, 0x4) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000180)={0xfffffffffffffffe, 0x1}) 03:23:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) munmap(&(0x7f0000fec000/0x13000)=nil, 0x13000) tkill(r1, 0x1004000000016) [ 253.868103][T11863] Unknown ioctl 1074025675 03:23:52 executing program 0: r0 = dup(0xffffffffffffffff) pidfd_send_signal(r0, 0x3, &(0x7f0000000040)={0x22, 0x9, 0x7}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x440, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882) timer_create(0x0, &(0x7f0000000480)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x15, &(0x7f0000000100)) [ 254.000332][T11889] Unknown ioctl 1074025675 03:23:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x2}) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x140, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) futex(&(0x7f0000000140)=0x2, 0x81, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x50000, 0x0) close(r1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000240)) setsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000280), 0x4) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000002c0)=""/101) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000340)={0x9, 0x12, 0x0, 0x7fffffff, "773986b3cc89829e56d583af191f4d167e1074607e6b9283dd0b46a87e308398"}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000380)={0x5, 0x20, 0x1582b8bfe5e3c400}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x0, 0x30, 0x2, 0x4}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000440)={r4, 0x36, "928a95b43da1b56866d1971c88d4313805cdc02a349f91637e514b18f260a67ed28df989432f70cbe1c5b97bef2877e04bec31df59c0"}, &(0x7f0000000480)=0x3e) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000540)='hwsim0\x00') write$binfmt_elf32(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x59c, 0x80000000, 0x5, 0x25, 0xbd, 0x3, 0x0, 0x6, 0x169, 0x38, 0x22e, 0x1, 0xbc81, 0x20, 0x1, 0x4, 0x2, 0x1}, [{0x6, 0x7, 0x5, 0x5, 0x1f, 0x7, 0x43, 0x5}, {0x5, 0xa6a, 0x9, 0x7fffffff, 0x80000000, 0xe000000000, 0x4, 0xbe9e}], "a2aa3a7e7a7df1d810dcc6d093a753110a9007840b83237142fd29b4084fe8b93e0a0b46", [[], [], [], [], [], [], [], []]}, 0x89c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001380)={'caif0\x00', 0x0}) sendmsg$xdp(r2, &(0x7f00000016c0)={&(0x7f00000013c0)={0x2c, 0x2, r5, 0x21}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001400)="c3465e2c4360330ced2390c886633799572aa66c7e94e07cabb3e898c2ee6f62fd4c30d1787e753956f8bee0538c45599bb0eb48b0e11511ed9516f5f99713aeee90eb52980c5c70872bbc37bb7fb9d7daebbaa6ec3050ae4131149ad23e997533497e135803d214a5f41a72696fbf046cb463f03f5be4f410f1cc953c90213a690800594d7e0fa3b21f9bfde61075b61c236f4fc32aeb0fd8eca488b43c2f91b625ac4134a2e255fe2dad2364f91551389d676f810060d56bd3ffb11f8fce5b023ec8cf21e2ba6bc667a70301e2e654e77726212c7b8b7fef74908c3ea1", 0xde}, {&(0x7f0000001500)="ffeed0244afaf22fd7572e0d4b9b36ad59b45e4a9cf09205aa346f26db7f72381d261aa02fbf906a0bcae7b5", 0x2c}, {&(0x7f0000001540)="2e64e015a973ffd7522d979170b9f22fa8964335997e78f6e906d2e86b80fca40c6c63d363d50bbb9377a07e4b529ee730e98858c0737612c0eed706a093e1eff6cf41a38baaea862553f244a00874f9ab2121219623c781f643cbc4029097a38845f1da1ae2d1e4dcd03d2a7c473ca45c6594fa8c1d3dad81a2e4e64663a7fec02c6014747c7513f889dd7673565c28f229f8d40f54066ce92456d8535b84ff610d59e05acc0c988c61bc81e75b9bef15f1fe609bfed6caee33860c34032354ac426bf8c9458565a645e225f5daf3c31bb70acd753d861b87747f13b0b0e45a40e0073db8", 0xe5}, {&(0x7f0000001640)="fe763aa3", 0x4}], 0x4, 0x0, 0x0, 0x4800}, 0x20000000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001700)={{0x6004, 0xd000, 0xc, 0x3ac0, 0x9, 0x1, 0x40, 0x5, 0x5, 0x3, 0x1, 0x159f}, {0x4, 0x1000, 0x0, 0x9, 0x0, 0x7, 0x9, 0x9, 0x401, 0x1, 0x7f, 0xf3}, {0x4e8b9c174a3bd418, 0x0, 0x3, 0x5, 0x100000001, 0xdc, 0x100, 0x400, 0xffffffffffffffff, 0xf4a6, 0x80000000, 0x81}, {0xf000, 0x0, 0xf, 0xe0, 0x3aa6, 0x4c22, 0x3, 0x1000, 0x0, 0x7fff, 0x3, 0x1}, {0x6000, 0x2000, 0x4, 0x9, 0x1, 0xfffffffffffffff8, 0x7, 0x1, 0x0, 0x2294}, {0x100002, 0x3000, 0xf, 0x101, 0xfffffffffffffe00, 0x4, 0x6, 0x6, 0x80000000, 0x1, 0x50ef6101, 0x39}, {0x4000, 0x7000, 0xf, 0xeb2, 0xffffffffffffff01, 0x0, 0xff, 0x8000, 0x6, 0x9, 0x0, 0x5}, {0x831c0a58ec0e20f7, 0x102000, 0xc, 0xb1cb, 0x7, 0x6, 0x1, 0xff, 0x3, 0x6340000000000000, 0xffffffff80000001, 0x5}, {0xd002, 0x6000}, {0xf000, 0x4}, 0x10004, 0x0, 0x10000, 0x424201, 0x6, 0x100, 0xf000, [0xffff, 0xc3b1, 0x8, 0xc2]}) r6 = socket(0x1, 0xf, 0x5) connect(r1, &(0x7f0000001840)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x3, 0x2, 0x2, {0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x22}}}}, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000018c0)={0x5, 0x820d, 0x4, 0xc642, r4}, &(0x7f0000001900)=0x10) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000001940)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001980)={0x6, 0x8204, 0x0, 0xffffffff7fffffff, r7}, &(0x7f00000019c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001a00)={0x6, 0x200, 0x1, 0x4, r8}, &(0x7f0000001a40)=0x10) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) utimes(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001b40)={{r9, r10/1000+30000}, {r11, r12/1000+10000}}) 03:23:52 executing program 0: munmap(&(0x7f000000d000/0x4000)=nil, 0x4000) mremap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000003000/0x1000)=nil) 03:23:52 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x20, 0x400, 0x8, 0x7fff}, {0x4, 0x100000000, 0x9a61, 0x100000001}, {0x0, 0x7, 0x3ff, 0x3ff}, {0x4, 0x8, 0x8, 0x5}, {0x5, 0x4, 0x100, 0x7}, {0x0, 0x4, 0x2, 0xf8}, {0x4, 0x9, 0x9, 0x1}, {0x7ff, 0x1ff, 0xd42a, 0x9}]}) r1 = socket$inet6(0xa, 0x7, 0xfffffffffffffffa) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000ae7ff4)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x4}) fcntl$setlease(r2, 0x400, 0x1) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffe1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={r3, 0x80000, r0}) 03:23:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000010807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0xfffffffffffffdb1}], 0x1}, 0x0) 03:23:53 executing program 1: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0xab, "9cc3bf7a30132bf4bbc0f6b30e4c8f18781766cd63c53e72bb346e47a144ed07aa1c453d1e9dde24b0bc4bcb528d41dff3ba487dc427dd43f0f7d89d8ed89075f1e1a3f3566ce67ed93006497dc44505dd9c0bbac6593a8ac6e184b42e0f07311519a9222b0e4f4004b27da6dfb8acd0b8306641aff16765520169e140b11acf4e6f9be882cc955026b768267c4df0749a5b1a2d65801d81e6d2e15027787c2761346d622e7f2adc670a66"}, &(0x7f0000000180)=0xcf) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev}}, 0x4c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x9400) 03:23:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000af"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0xfffffffffffffffb}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:23:53 executing program 1: r0 = semget$private(0x0, 0x20000000104, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x4, 0x7ffd}, {0x0, 0x8091}], 0x2, 0x0) semop(r0, &(0x7f0000035000)=[{0x4, 0x81}], 0x1) semctl$SETVAL(r0, 0x5, 0x10, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) connect(r2, &(0x7f00000000c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80) [ 255.319009][T11911] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 03:23:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00\x80\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8800, 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='$,\x00', &(0x7f0000000100)='securityn,\x00', &(0x7f0000000140)='queue1\x00'], &(0x7f00000004c0)=[&(0x7f0000000280)='/dev/snd/seq\x00', &(0x7f00000002c0)='[\\!self#uservboxnet0proc.\x00', &(0x7f0000000300)='queue1\x00', &(0x7f0000000400)='queue1\x00', &(0x7f0000000440)='#\x00', &(0x7f0000000480)='client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00\x80\x00'], 0x800) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x2, 'queue1\x00'}) 03:23:53 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1) pwritev(r0, &(0x7f0000000080), 0x30b, 0x0) [ 255.550451][T11920] IPVS: ftp: loaded support on port[0] = 21 03:23:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x80440) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4005}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0xa02, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000100)={0x7e, 0x0, [0x179, 0x9, 0x3], [0xc1]}) [ 255.814022][T11920] chnl_net:caif_netlink_parms(): no params data found 03:23:53 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x23c, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a075f1dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x4) 03:23:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e00b4ec7be070") r1 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x3, 0x10, 0xa842, 0x6}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x7f, 0x5, 0x1}, &(0x7f0000000280)=0x10) fsetxattr$security_smack_transmute(r1, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 255.872957][T11920] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.880269][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.889160][T11920] device bridge_slave_0 entered promiscuous mode [ 255.923905][T11920] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.931125][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.940260][T11920] device bridge_slave_1 entered promiscuous mode [ 256.030271][T11920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.050283][T11920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.068742][T11938] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 256.082702][T11920] team0: Port device team_slave_0 added [ 256.087337][T11938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.119094][T11920] team0: Port device team_slave_1 added [ 256.153832][T11941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 256.162289][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.186890][T11920] device hsr_slave_0 entered promiscuous mode [ 256.243089][T11920] device hsr_slave_1 entered promiscuous mode [ 256.282028][T11920] debugfs: Directory 'hsr0' with parent '/' already present! [ 256.338742][T11920] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.346038][T11920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.353831][T11920] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.361034][T11920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.478439][T11920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.501555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.513945][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.525655][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.539644][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 256.561673][T11920] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.580300][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.589757][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.597000][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.657587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.666707][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.673951][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.685058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.695288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.704812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.713834][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.730364][T11920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.764235][T11920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.797018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:23:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="4b65c87209a5e92a5fcbc2cb58cbd755bdc8df0723d1205de06fa57a3fd514121e2f598d898a0acb6bbfec9f4a62bd2fa01a6e300caaf995e8abfb25d7bdf1d140f3ec0670bfac6368cf93d08a4935554a2c390280f3ee828f21c0203aad7fb9080d3c0b8b515529f50286b152efa1a04eb3c09ea7820f97c80850556064e9420efadd3b408d99b2b40ef6", 0x8b}, {&(0x7f0000000200)="b81e9fae04264bac45d49f90e37916607d6b70303ddebbdfc77ea58b36a2c5793f8bac58ef7fb24141b5fa415bec3734", 0x30}, {&(0x7f0000000280)="e49b170a2822ddff71cb30591fd1d5f80542c9cdbb8a643e052068b9a5208a370d824c7316ad1d0b28815ecc3952587dea8463297535aa264ee2a704f8bca9c29de8fbdc2636c4a1bb7ccbda2816248f9bf59d52ad4ec2f8dcd3aefe17b3c5823ec2174942a80804ff4087775ee7ad939c69491d422bfe0ea8eeb0611406be627f2c5b2fc448836a934f30e3370b23", 0x8f}, {&(0x7f0000000340)="f76faefc3d4699f6d775336c5f98ff45253a97508b1dd830b821d8807947598a678e0d482bd73729895072a6851344238517343553e24a073395ccc3c608076c405ffe7e208ae2ed92f901038519b7f7aec93dc5b210fda157177e85c0db43ba3b25923559986f2454960b25cc85da56d285329fa40c4c0ab6d038fca809301dde4d555409b48550727070f738cc6f3aef0d4ecd9f0953d0d246a8fd54e4c0209052141aca9b5a3a0c833c4773d69d53bc3e0d206c61082f0491", 0xba}, {&(0x7f0000000580)="a4708136c5835740870532a21185d213e898ffdd1d7b31184eaa85bc3abe7d70daa1661c572eda622e689e05502f39c30bb171e0c50ba869abc8bf06aba91fb252358bc2e21b565fef74a612b3e06f1d6f133f626d48b57e5ceeda33054ce58bafc66a3fa288b6ae8f149a56fab6ceb78e6fc3ff6852e28b70c7a5f68fd8a8a8", 0x1f}, {&(0x7f0000000400)="c9cf591406eddc379f41c4a9c256891246c39c58d95c0908644ea34d882928770768f65af431fbc253708d35ea9ea9a1e613f198d9b3ebc4d674ec0ea1469f8175303011c91effdd6fdff0879d04baf50ddcff0c62e7f01eb277db2f574db153ba78a2b8bf55d3d11ddb0497388dce174f458c7abb2b5b1f20764438ac737f4678fd5494c967ac5da26b1bba7b0ba2e76c5d6be7070917aa389ca3288f97e7d096859c53226c2feccde732c3136e84229fdc701a93c055d1fcff86c3c8f4ccc61d05fe80c31aaebdf56739", 0xcb}], 0x1000000000000089}, 0x0) 03:23:55 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x8041, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x44f9, 0x0, 0xffffffff}, 0x120) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x8, 0x101, 0x9, 0xffffffffffffffe0, 0x80000000}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x9af}, &(0x7f0000000180)=0x8) [ 256.895388][T11948] Unknown ioctl 1076380932 [ 256.900960][T11948] Unknown ioctl 35123 [ 256.906850][T11948] Unknown ioctl 1094233732 [ 256.919948][T11948] Unknown ioctl 1076380932 [ 256.927491][T11950] Unknown ioctl 35123 [ 256.933408][T11949] Unknown ioctl 1094233732 03:23:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000080)={0x52, 0x7d, 0x2, {0x0, 0x4b, 0x6, 0x101, {0x84, 0x4, 0x5}, 0x10000000, 0x1, 0x7fffffff, 0x9, 0x0, '', 0x5, 'ipip\x00', 0x8, 'eth0self', 0xb, '\x18vboxnet0})'}}, 0x52) 03:23:55 executing program 2: getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') 03:23:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3e63, 0x2, [0x4a, 0xff]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x63, "424560382047548b8f18b7b1f52ff6cefc90e7f132db4fcb3db9c8fbab29f9410f94fd013f855492aab3b088fca6dc8916583d08bdb7b973501e0e6ba46fd4a68952e87efbbbd3a2c34dbcaf6fb18c1a182fedb30acfe32aea4c1b8026d125bf11317e"}, &(0x7f0000000140)=0x6b) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="d2e31852b0e407cdb2aff4e3ac89b333", 0x10) write(r0, &(0x7f0000000080)="240000005a001f000307f4f9002304005c904d81c88b0a04f51108000100020100020800", 0x24) [ 257.174830][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:23:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="050000d17f99d5514048b61536000000020071100800000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 257.221394][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:23:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descenda\xa3\xca\xb0t\xae\x05\xd44\xb8\x85\x1d\xbe\xf1\xb5\x14nts\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5a, 0x80) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x4, [], &(0x7f0000000080)=0x2}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) write$cgroup_int(r1, &(0x7f00000001c0), 0xa) 03:23:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x59555956}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80, 0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x20}, 0x8) 03:23:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0x0, @in=@multicast1, 0x0, 0xfffffffffffffffe}}, 0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x401}, &(0x7f00000000c0)=0x8) 03:23:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="860f4c0e57c99ca0ad78349f5803fd3a1a6d5cb848ca6b3a3206e01f00a823b3483f5492d0616e6600df2b1e1a85f73de44bb8ad5fec5c8209d7b1a6b648d4fb1f28371505f7c1c02959b6e3767c88918ce87d3d58a3b0db268cebdc82dd41facd9ac6e0f3fbdcda559bba40cb2e6f5cc594318057f010d37567beffffff7f00000000ee9a9a68e4d7de475625837627b772f87f4094a2f413e2283fa11f79fedc805517dcebacff27abcd18"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockname(r3, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:23:55 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x200, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000092000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000939f96c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e86aa5648900a6690000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b95aaf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 03:23:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7b, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x32, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r2) dup3(r3, r1, 0x0) 03:23:55 executing program 2: clone(0x4045f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x3, r2}) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000000)={0xfffffffffffffffd}) 03:23:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) fsopen(&(0x7f0000000080)='9p\x00', 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x20000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x9, 0x2, 0x6, 0x4305, 0x96, 0x2}) 03:23:55 executing program 0: r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x29) 03:23:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x40000003, 0x1]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x80000000, 0xffff, 0x5, 0x2, 0x4, 0xf61f, 0x1ff, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x27, 0x7fff, 0x7, 0x3f, 0x2}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x1, 0xc, 0x3f, 0xfbb, r4}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:23:56 executing program 0: r0 = socket(0x40000006, 0x1, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f736c617665000000000c00050008000500000000005c5d8641d10074164582ca9e96f9379604372134012b14ed086d3085c0c7df84892c2f"], 0x44}}, 0x0) 03:23:56 executing program 0: unshare(0xa00) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x4000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0xffffffff}, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r1, 0xfffffffffffffffe}, 0x8) syz_open_pts(0xffffffffffffffff, 0x400002) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x101000) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x350000000000000, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x4000, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x4, 0x181040) syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x3, 0x2001) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) r5 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$P9_ROPEN(r4, &(0x7f00000001c0)={0x18, 0x71, 0xffffffffffffffff, {{0x10, 0x3, 0x4}, 0x100000001}}, 0x18) ioctl$RTC_VL_CLR(r0, 0x7014) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x80, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) fsync(r5) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000580)=""/103) 03:23:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c2b9e71b5e0bceec7be070") r1 = memfd_create(&(0x7f00000001c0)='#! ', 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x40100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000240)={0x10000004}) write$apparmor_exec(r2, &(0x7f0000000040)={'exec ', '::\x00\xd0\x9c\xd3r\xc2\xefU\t\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc6uu\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe5) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 03:23:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x402000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x80000001, 0x8, 0x8, 0x6, 0x4}) socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x6) 03:23:56 executing program 0: r0 = socket(0x10, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4040, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000000c0)={0x8, 0x2007ce, 0xfffffffffffffffa, 0x7fff, 0x4, 0xfffffffffffffffe}) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x4c) socket$can_raw(0x1d, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000100)={'nr0\x00', @ifru_map={0x1, 0x6, 0xa63, 0x200000000000000, 0x434, 0x1d7}}) 03:23:56 executing program 1: r0 = socket(0x15, 0x805, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f00000000c0)=0xfffffffffffffed7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0c100a3471e7988126706f671057dede57683a52eb393680e16d571b678bbada7dc503b87f0a9a7ba707bc346a233bf1cf57000000000000000000"], &(0x7f0000000040)=0x3f) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x1, 0x10000, 0x6}, &(0x7f0000000100)=0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000200)=0x5, 0x11c) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/29, 0x1d, 0x42, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @remote, 0x2400}}, 0x24) socket(0xa, 0x4, 0x4) 03:23:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000002c0)=""/127, 0x23a) ioctl$TCFLSH(r0, 0x540b, 0x1416) 03:23:56 executing program 2: io_setup(0x1004, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x10187d, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x1101}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 03:23:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x1000) dup2(r0, r1) 03:23:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x80001) sendmsg$nl_generic(r1, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000080)={0x2304, 0x23, 0x405, 0x70bd2a, 0x25dfdbfd, {0x8}, [@nested={0x50, 0x4f, [@generic="f458dc5c4caf63cdd414c56203cba80af63e6377dd3a57b3244e7343aa27383776981af1c678998323296ab330462fbc15405e3c17b67d5a4ba5ac370270035b1d894725f6f0bc8072c2f3"]}, @nested={0x20d4, 0x92, [@generic="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", @generic="884c893edc41b1d7c34fc042f4b3d1975a5ea4af24a806ae6e1fd837b3076fbc1db83a5531db33c27bdb86620c11d13b22d3b2841d3015a959e53eb723e6b00426d0bc035b8de1bbc607ddacfb62af885a52a4e928330ccd867a18dcc0c06c1b908df7e7e49c49032817a8e7f3a65f37cae59f9efe843ec30fdf1f3a91c24a04637f0c4a0dc600ea29ea197274300e", @generic="cfa76ff12cc071263ce2cca1e3c0f3d65d974a766aa9be3e78feeddbf1e07298973c77602565213294870afde6b48e36fc0caec1c78b8a7d48", @generic="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", @typed={0x8, 0x86, @str='&\x00'}]}, @typed={0xc, 0x1c, @u64=0x8}, @typed={0x14, 0x8a, @str='[\xc4lowlan0nodev\x00'}, @typed={0x58, 0x7b, @binary="48416e69dc3842cf855bc442ffd9884f78509bab50a85e91dc09877daa4ec6adda2125b590929fae1fc74aab9727835afcdad15d795d08524cf04ddccce0e6f7bcbdf538df817fc989c244df2c6ca471b958"}, @generic="af039a916fa295c5fc0826faaf547b8e49adbdaa7125080eb1b6a9c9a8ee58ac6e56c436737d88b9403643deb0bf32c476c1fe589c0e95d7f9c6a0c6778c008f220fa456c8311525c613ee9ddd58d2e6d4a8ca956424f5111ba27687bd4b24618392836a7dfa227cb45f2ad997894b8912bd9c72bba6d7a084e628a9c941b0c57502c00a53cf8a9e169744b2c7fd43afaa77cfbc245be497ee1defb82280496e93", @nested={0xa8, 0x15, [@typed={0x14, 0x5a, @ipv6=@remote}, @generic="7b2813cb65555cb41b2b051c913f9551aef43a6d09cd1b94834ac1e35a4ee0b2ea82f2e1b0941b8bb722443f4cf682b12326e1a52b7a2d032c281abbfff55d02d21dd6035b68e803515f8ee6db7f2b710e71bf5725d262f20a4649fe0d14975b51f8cc1fe05b619ae54211706ef03f0cf9c2f2e17b1a2704bc72d1a2ff4a0e1fcb222336a35f7b5e0e7c47d6", @generic, @typed={0x4, 0x489b}]}, @typed={0x8, 0x1f, @u32=0x15ea7d10}]}, 0x2304}}, 0x4000000) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000bfcffc), &(0x7f0000d12ffc)=0xffffffffffffff3b) [ 258.965640][ C0] ================================================================== [ 258.973773][ C0] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 258.981412][ C0] CPU: 0 PID: 11748 Comm: syz-fuzzer Not tainted 5.3.0-rc3+ #16 [ 258.989051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.999118][ C0] Call Trace: [ 259.002417][ C0] [ 259.005288][ C0] dump_stack+0x191/0x1f0 [ 259.009642][ C0] kmsan_report+0x162/0x2d0 [ 259.014161][ C0] __msan_warning+0x75/0xe0 [ 259.018689][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.023973][ C0] ? __alloc_skb+0x215/0xa10 [ 259.028596][ C0] __alloc_skb+0x215/0xa10 [ 259.033060][ C0] aoecmd_cfg+0x205/0xa80 [ 259.037419][ C0] discover_timer+0x86/0xa0 [ 259.041932][ C0] call_timer_fn+0x232/0x530 [ 259.046535][ C0] ? skbfree+0x4a0/0x4a0 [ 259.050773][ C0] __run_timers+0xcdc/0x11a0 [ 259.055366][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.061468][ C0] ? skbfree+0x4a0/0x4a0 [ 259.065755][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.071767][ C0] run_timer_softirq+0x2d/0x50 [ 259.076564][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.081509][ C0] __do_softirq+0x4a1/0x83a [ 259.086105][ C0] irq_exit+0x230/0x280 [ 259.090259][ C0] exiting_irq+0xe/0x10 [ 259.094420][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.099936][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.105067][ C0] [ 259.108018][ C0] RIP: 0010:metadata_is_contiguous+0x913/0x9f0 [ 259.114365][ C0] Code: 01 c3 e9 78 fe ff ff e8 0b 74 73 ff 85 c0 0f 84 96 00 00 00 41 c6 84 24 9b 09 00 00 00 31 c0 48 83 c4 48 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 48 c7 c7 5d 3b 26 8f 31 c0 e8 98 a2 73 ff e9 c7 fd ff [ 259.133991][ C0] RSP: 0018:ffff8880ab82eca8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 259.142413][ C0] RAX: ffffffff8f457001 RBX: ffffffff902c0000 RCX: 0000000000000003 [ 259.150379][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8f23e2e8 [ 259.158344][ C0] RBP: ffff8880ab82ecb0 R08: ffffea000000000f R09: ffff88812fffb000 [ 259.166327][ C0] R10: 0000000000000004 R11: 000000008b40edcb R12: 0000000000000000 [ 259.174558][ C0] R13: 000000000000002c R14: ffff8880ab82ef9c R15: 0000000000000004 [ 259.182549][ C0] kmsan_get_shadow_origin_ptr+0x6e/0x3a0 [ 259.188277][ C0] __msan_metadata_ptr_for_store_4+0x13/0x20 [ 259.194245][ C0] sha256_generic_block_fn+0x324/0x8870 [ 259.199818][ C0] crypto_sha256_update+0x3f6/0x480 [ 259.205019][ C0] ? sha1_base_init+0x180/0x180 [ 259.209873][ C0] crypto_shash_update+0x4eb/0x550 [ 259.215003][ C0] ? integrity_kernel_read+0x221/0x280 [ 259.220476][ C0] ima_calc_file_hash+0x170a/0x3240 [ 259.225675][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.231664][ C0] ? kmsan_set_origin+0x26d/0x340 [ 259.236689][ C0] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 259.242762][ C0] ? up_read+0x40/0x2b0 [ 259.246922][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.252906][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 259.258970][ C0] ? kmsan_set_origin+0x26d/0x340 [ 259.265144][ C0] ima_collect_measurement+0x4a5/0x9e0 [ 259.270627][ C0] process_measurement+0x1a7d/0x2ba0 [ 259.275928][ C0] ? refcount_dec_and_test_checked+0x14c/0x210 [ 259.282076][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.288045][ C0] ? apparmor_task_getsecid+0x172/0x190 [ 259.293587][ C0] ? apparmor_task_alloc+0x210/0x210 [ 259.298978][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.304952][ C0] ima_file_check+0x131/0x170 [ 259.309627][ C0] path_openat+0x4b09/0x6bb0 [ 259.314220][ C0] ? expand_files+0xa4/0xf00 [ 259.318824][ C0] ? kmsan_get_metadata_or_null+0x208/0x290 [ 259.324713][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.330785][ C0] do_filp_open+0x2b8/0x710 [ 259.335406][ C0] do_sys_open+0x642/0xa30 [ 259.339820][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.345824][ C0] __se_sys_openat+0xcb/0xe0 [ 259.350417][ C0] __x64_sys_openat+0x56/0x70 [ 259.355078][ C0] do_syscall_64+0xbc/0xf0 [ 259.359490][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.365367][ C0] RIP: 0033:0x47fd2a [ 259.369263][ C0] Code: e8 bb 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 259.388853][ C0] RSP: 002b:000000c42f1117f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000101 [ 259.397252][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd2a [ 259.405217][ C0] RDX: 0000000000080002 RSI: 000000c42b61f120 RDI: ffffffffffffff9c [ 259.413189][ C0] RBP: 000000c42f111878 R08: 0000000000000000 R09: 0000000000000000 [ 259.421165][ C0] R10: 00000000000001a4 R11: 0000000000000216 R12: 0000000000000000 [ 259.429124][ C0] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000001 [ 259.437088][ C0] [ 259.439408][ C0] Uninit was stored to memory at: [ 259.444452][ C0] kmsan_internal_chain_origin+0xcc/0x150 [ 259.450166][ C0] __msan_chain_origin+0x6b/0xe0 [ 259.455278][ C0] ___slab_alloc+0x1dbc/0x1fb0 [ 259.460040][ C0] kmem_cache_alloc_node+0x769/0xe70 [ 259.465324][ C0] __alloc_skb+0x215/0xa10 [ 259.469744][ C0] aoecmd_cfg+0x205/0xa80 [ 259.474082][ C0] discover_timer+0x86/0xa0 [ 259.478594][ C0] call_timer_fn+0x232/0x530 [ 259.483186][ C0] __run_timers+0xcdc/0x11a0 [ 259.487782][ C0] run_timer_softirq+0x2d/0x50 [ 259.492548][ C0] __do_softirq+0x4a1/0x83a [ 259.497044][ C0] irq_exit+0x230/0x280 [ 259.501185][ C0] exiting_irq+0xe/0x10 [ 259.505330][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.510701][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.515714][ C0] metadata_is_contiguous+0x913/0x9f0 [ 259.521100][ C0] kmsan_get_shadow_origin_ptr+0x6e/0x3a0 [ 259.526809][ C0] __msan_metadata_ptr_for_store_4+0x13/0x20 [ 259.532778][ C0] sha256_generic_block_fn+0x324/0x8870 [ 259.538343][ C0] crypto_sha256_update+0x3f6/0x480 [ 259.543559][ C0] crypto_shash_update+0x4eb/0x550 [ 259.548654][ C0] ima_calc_file_hash+0x170a/0x3240 [ 259.553859][ C0] ima_collect_measurement+0x4a5/0x9e0 [ 259.559332][ C0] process_measurement+0x1a7d/0x2ba0 [ 259.564601][ C0] ima_file_check+0x131/0x170 [ 259.569262][ C0] path_openat+0x4b09/0x6bb0 [ 259.573831][ C0] do_filp_open+0x2b8/0x710 [ 259.578321][ C0] do_sys_open+0x642/0xa30 [ 259.582747][ C0] __se_sys_openat+0xcb/0xe0 [ 259.587352][ C0] __x64_sys_openat+0x56/0x70 [ 259.592038][ C0] do_syscall_64+0xbc/0xf0 [ 259.596442][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.602310][ C0] [ 259.604641][ C0] Uninit was created at: [ 259.608881][ C0] kmsan_internal_poison_shadow+0x53/0xa0 [ 259.614594][ C0] kmsan_slab_free+0x8d/0x100 [ 259.619265][ C0] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 259.624647][ C0] __kfree_skb_flush+0xb0/0x100 [ 259.629500][ C0] net_rx_action+0x1908/0x1950 [ 259.634261][ C0] __do_softirq+0x4a1/0x83a [ 259.638756][ C0] irq_exit+0x230/0x280 [ 259.642904][ C0] do_IRQ+0x20d/0x3a0 [ 259.646876][ C0] ret_from_intr+0x0/0x33 [ 259.651199][ C0] default_idle+0x53/0x90 [ 259.655529][ C0] arch_cpu_idle+0x25/0x30 [ 259.659928][ C0] do_idle+0x1d7/0x790 [ 259.663987][ C0] cpu_startup_entry+0x45/0x50 [ 259.668737][ C0] start_secondary+0x370/0x470 [ 259.673511][ C0] secondary_startup_64+0xa4/0xb0 [ 259.678527][ C0] ================================================================== [ 259.686576][ C0] Disabling lock debugging due to kernel taint [ 259.692719][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 259.699332][ C0] CPU: 0 PID: 11748 Comm: syz-fuzzer Tainted: G B 5.3.0-rc3+ #16 [ 259.708332][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.718367][ C0] Call Trace: [ 259.721645][ C0] [ 259.724498][ C0] dump_stack+0x191/0x1f0 [ 259.728839][ C0] panic+0x3c9/0xc1e [ 259.732747][ C0] kmsan_report+0x2ca/0x2d0 [ 259.737350][ C0] __msan_warning+0x75/0xe0 [ 259.741858][ C0] kmem_cache_alloc_node+0x5d0/0xe70 [ 259.747161][ C0] ? __alloc_skb+0x215/0xa10 [ 259.751759][ C0] __alloc_skb+0x215/0xa10 [ 259.756188][ C0] aoecmd_cfg+0x205/0xa80 [ 259.760514][ C0] discover_timer+0x86/0xa0 [ 259.765013][ C0] call_timer_fn+0x232/0x530 [ 259.769607][ C0] ? skbfree+0x4a0/0x4a0 [ 259.773875][ C0] __run_timers+0xcdc/0x11a0 [ 259.778467][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 259.784540][ C0] ? skbfree+0x4a0/0x4a0 [ 259.788800][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.794767][ C0] run_timer_softirq+0x2d/0x50 [ 259.799518][ C0] ? timers_dead_cpu+0x9d0/0x9d0 [ 259.804467][ C0] __do_softirq+0x4a1/0x83a [ 259.808989][ C0] irq_exit+0x230/0x280 [ 259.813141][ C0] exiting_irq+0xe/0x10 [ 259.817278][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 259.822658][ C0] apic_timer_interrupt+0x2e/0x40 [ 259.827668][ C0] [ 259.830599][ C0] RIP: 0010:metadata_is_contiguous+0x913/0x9f0 [ 259.836741][ C0] Code: 01 c3 e9 78 fe ff ff e8 0b 74 73 ff 85 c0 0f 84 96 00 00 00 41 c6 84 24 9b 09 00 00 00 31 c0 48 83 c4 48 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 48 c7 c7 5d 3b 26 8f 31 c0 e8 98 a2 73 ff e9 c7 fd ff [ 259.856519][ C0] RSP: 0018:ffff8880ab82eca8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 259.864917][ C0] RAX: ffffffff8f457001 RBX: ffffffff902c0000 RCX: 0000000000000003 [ 259.872875][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8f23e2e8 [ 259.880839][ C0] RBP: ffff8880ab82ecb0 R08: ffffea000000000f R09: ffff88812fffb000 [ 259.888813][ C0] R10: 0000000000000004 R11: 000000008b40edcb R12: 0000000000000000 [ 259.896808][ C0] R13: 000000000000002c R14: ffff8880ab82ef9c R15: 0000000000000004 [ 259.904793][ C0] kmsan_get_shadow_origin_ptr+0x6e/0x3a0 [ 259.910602][ C0] __msan_metadata_ptr_for_store_4+0x13/0x20 [ 259.916569][ C0] sha256_generic_block_fn+0x324/0x8870 [ 259.922141][ C0] crypto_sha256_update+0x3f6/0x480 [ 259.927328][ C0] ? sha1_base_init+0x180/0x180 [ 259.932163][ C0] crypto_shash_update+0x4eb/0x550 [ 259.937281][ C0] ? integrity_kernel_read+0x221/0x280 [ 259.942755][ C0] ima_calc_file_hash+0x170a/0x3240 [ 259.947960][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.953944][ C0] ? kmsan_set_origin+0x26d/0x340 [ 259.958967][ C0] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 259.965023][ C0] ? up_read+0x40/0x2b0 [ 259.969165][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 259.975135][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 259.981233][ C0] ? kmsan_set_origin+0x26d/0x340 [ 259.986282][ C0] ima_collect_measurement+0x4a5/0x9e0 [ 259.991744][ C0] process_measurement+0x1a7d/0x2ba0 [ 259.997126][ C0] ? refcount_dec_and_test_checked+0x14c/0x210 [ 260.003264][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 260.009251][ C0] ? apparmor_task_getsecid+0x172/0x190 [ 260.014802][ C0] ? apparmor_task_alloc+0x210/0x210 [ 260.020073][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 260.026062][ C0] ima_file_check+0x131/0x170 [ 260.030734][ C0] path_openat+0x4b09/0x6bb0 [ 260.035354][ C0] ? expand_files+0xa4/0xf00 [ 260.039967][ C0] ? kmsan_get_metadata_or_null+0x208/0x290 [ 260.046463][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 260.052430][ C0] do_filp_open+0x2b8/0x710 [ 260.056932][ C0] do_sys_open+0x642/0xa30 [ 260.061344][ C0] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 260.067349][ C0] __se_sys_openat+0xcb/0xe0 [ 260.071961][ C0] __x64_sys_openat+0x56/0x70 [ 260.076737][ C0] do_syscall_64+0xbc/0xf0 [ 260.081138][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 260.087032][ C0] RIP: 0033:0x47fd2a [ 260.090923][ C0] Code: e8 bb 40 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 260.110630][ C0] RSP: 002b:000000c42f1117f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000101 [ 260.119032][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fd2a [ 260.126984][ C0] RDX: 0000000000080002 RSI: 000000c42b61f120 RDI: ffffffffffffff9c [ 260.134939][ C0] RBP: 000000c42f111878 R08: 0000000000000000 R09: 0000000000000000 [ 260.142893][ C0] R10: 00000000000001a4 R11: 0000000000000216 R12: 0000000000000000 [ 260.150854][ C0] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000001 [ 260.160200][ C0] Kernel Offset: disabled [ 260.164530][ C0] Rebooting in 86400 seconds..