Warning: Permanently added '[localhost]:59143' (ECDSA) to the list of known hosts. 2020/10/21 22:30:16 fuzzer started 2020/10/21 22:30:17 dialing manager at 10.0.2.10:35517 2020/10/21 22:30:17 syscalls: 3441 2020/10/21 22:30:17 code coverage: enabled 2020/10/21 22:30:17 comparison tracing: enabled 2020/10/21 22:30:17 extra coverage: enabled 2020/10/21 22:30:17 setuid sandbox: enabled 2020/10/21 22:30:17 namespace sandbox: enabled 2020/10/21 22:30:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/21 22:30:17 fault injection: enabled 2020/10/21 22:30:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/21 22:30:17 net packet injection: enabled 2020/10/21 22:30:17 net device setup: enabled 2020/10/21 22:30:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/21 22:30:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/21 22:30:17 USB emulation: enabled 2020/10/21 22:30:17 hci packet injection: enabled 2020/10/21 22:30:17 wifi device emulation: enabled 22:31:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x38, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x0, 0xfff3}}, [@tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 22:31:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_data=0x0}) 22:31:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x202) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cf6ef25b211470c3687b8de33897f25a9268a12bd98b8bafa956acf1951b1a314654134060c6339887a109e2c1d43a374b450d0bea0e107c0e0696904a77f932", "acb66aa9274f7e5a75a0f553e076d544f1364dc524db673f25e102656468fba7a183866121aa2c8dcd7c4b15e8926762b27d1316de5b153991d3ae7a81f7a99c", "c52d11a49620e16f16bde9e1f7c06196126bb4236b7b3d64160ccbe199841d62"}) 22:31:23 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') read$FUSE(r0, &(0x7f0000004680)={0x2020}, 0x2020) syzkaller login: [ 167.690940][ T9159] IPVS: ftp: loaded support on port[0] = 21 [ 167.809122][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 167.890353][ T9161] IPVS: ftp: loaded support on port[0] = 21 [ 167.903524][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.916292][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.931484][ T9159] device bridge_slave_0 entered promiscuous mode [ 167.952138][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.963484][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.979938][ T9159] device bridge_slave_1 entered promiscuous mode [ 168.042186][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.100114][ T9163] IPVS: ftp: loaded support on port[0] = 21 [ 168.123543][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.172141][ T9159] team0: Port device team_slave_0 added [ 168.212143][ T9159] team0: Port device team_slave_1 added [ 168.235952][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 168.305171][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.315600][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.351601][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.390572][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.401390][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.445505][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.476811][ T9165] IPVS: ftp: loaded support on port[0] = 21 [ 168.492705][ T9159] device hsr_slave_0 entered promiscuous mode [ 168.504322][ T9159] device hsr_slave_1 entered promiscuous mode [ 168.548476][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.579871][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.599054][ T9161] device bridge_slave_0 entered promiscuous mode [ 168.611724][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.621185][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.634468][ T9161] device bridge_slave_1 entered promiscuous mode [ 168.659553][ T9161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.677694][ T9161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.727687][ T9161] team0: Port device team_slave_0 added [ 168.748397][ T9161] team0: Port device team_slave_1 added [ 168.802801][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.814087][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.857114][ T9161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.900471][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.915945][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.956218][ T9161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.981241][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 169.072008][ T9161] device hsr_slave_0 entered promiscuous mode [ 169.080419][ T9161] device hsr_slave_1 entered promiscuous mode [ 169.090458][ T9161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.100362][ T9161] Cannot create hsr debugfs directory [ 169.120063][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 169.232333][ T9159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.270933][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.281168][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.299539][ T9163] device bridge_slave_0 entered promiscuous mode [ 169.315501][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.324734][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.337626][ T9163] device bridge_slave_1 entered promiscuous mode [ 169.354618][ T9159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.374603][ T9159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.418378][ T9159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.439176][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.478958][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.519873][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.530740][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.540692][ T9165] device bridge_slave_0 entered promiscuous mode [ 169.556161][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.567251][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.578146][ T9165] device bridge_slave_1 entered promiscuous mode [ 169.592182][ T9163] team0: Port device team_slave_0 added [ 169.604827][ T9163] team0: Port device team_slave_1 added [ 169.659897][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.668414][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.679297][ T3070] Bluetooth: hci0: command 0x0409 tx timeout [ 169.704033][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.738821][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.747603][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.782579][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.800824][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.844899][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.886089][ T9161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.908297][ T3070] Bluetooth: hci1: command 0x0409 tx timeout [ 169.931288][ T9163] device hsr_slave_0 entered promiscuous mode [ 169.946927][ T9163] device hsr_slave_1 entered promiscuous mode [ 169.956417][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.969353][ T9163] Cannot create hsr debugfs directory [ 169.991554][ T9161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.002818][ T9161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.015143][ T9161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.031018][ T9165] team0: Port device team_slave_0 added [ 170.068591][ T9191] Bluetooth: hci2: command 0x0409 tx timeout [ 170.069675][ T9165] team0: Port device team_slave_1 added [ 170.149178][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.158701][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.209768][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.241386][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.253293][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.301234][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.308271][ T3070] Bluetooth: hci3: command 0x0409 tx timeout [ 170.405255][ T9165] device hsr_slave_0 entered promiscuous mode [ 170.417280][ T9165] device hsr_slave_1 entered promiscuous mode [ 170.431086][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.442966][ T9165] Cannot create hsr debugfs directory [ 170.551634][ T9163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.572871][ T9163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.593959][ T9163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.613548][ T9163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.656445][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.674265][ T9165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.693130][ T9165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.722949][ T9165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.741967][ T9165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.764334][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.779331][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.806305][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.826561][ T9161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.862168][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.875361][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.886412][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.895552][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.917595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.928406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.938941][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.951061][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.960902][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.971538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.991280][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.002043][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.013774][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.035861][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.047530][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.064497][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.079686][ T9161] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.103818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.116015][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.126503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.143152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.169751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.183453][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.197573][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.209524][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.225528][ T9159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.243379][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.275832][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.293055][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.307080][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.318444][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.330295][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.340854][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.350183][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.371881][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.390051][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.399026][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.408265][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.429998][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.446198][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.462187][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.473871][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.484469][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.506497][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.546401][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.566749][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.583279][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.602990][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.625887][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.640656][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.653020][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.667299][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.680091][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.695647][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.707440][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.715930][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.746913][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.762157][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.768325][ T3494] Bluetooth: hci0: command 0x041b tx timeout [ 171.773300][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.811999][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.835203][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.864712][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.891846][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.907804][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.918939][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.929754][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.940618][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.953283][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.964146][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.980485][ T9161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.988408][ T3494] Bluetooth: hci1: command 0x041b tx timeout [ 172.020167][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.043191][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.057299][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.072646][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.084683][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.121664][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.133604][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.145088][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.153749][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.158476][ T9187] Bluetooth: hci2: command 0x041b tx timeout [ 172.164465][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.189092][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.201917][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.213091][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.223169][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.237111][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.258584][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.273529][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.284971][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.301504][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.318821][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.329313][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.339638][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.349867][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.384063][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.388535][ T37] Bluetooth: hci3: command 0x041b tx timeout [ 172.398175][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.421351][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.433538][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.448218][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.457596][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.468542][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.485263][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.508679][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.520563][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.531318][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.541509][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.552867][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.563625][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.576456][ T9159] device veth0_vlan entered promiscuous mode [ 172.594694][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.603803][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.618749][ T9161] device veth0_vlan entered promiscuous mode [ 172.631447][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.641341][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.657827][ T9159] device veth1_vlan entered promiscuous mode [ 172.667467][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.678069][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.687312][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.697463][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.707596][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.722873][ T9165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.741914][ T9161] device veth1_vlan entered promiscuous mode [ 172.759418][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.782749][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.793311][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.808215][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.820949][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.830587][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.862698][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.871614][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.882355][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.896348][ T9159] device veth0_macvtap entered promiscuous mode [ 172.914375][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.924654][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.935495][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.947115][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.958660][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.971907][ T9159] device veth1_macvtap entered promiscuous mode [ 172.988662][ T9161] device veth0_macvtap entered promiscuous mode [ 173.004954][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.015248][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.027021][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.040636][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.058695][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.069605][ T9161] device veth1_macvtap entered promiscuous mode [ 173.079011][ T9163] device veth0_vlan entered promiscuous mode [ 173.091198][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.103116][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.114010][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.123890][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.136845][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.163737][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.195054][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.227543][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.253103][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.281197][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.320205][ T9159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.337656][ T9159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.356639][ T9159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.373132][ T9159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.398540][ T9161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.415460][ T9161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.433032][ T9161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.456682][ T9163] device veth1_vlan entered promiscuous mode [ 173.467795][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.483204][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.504587][ T9161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 173.518437][ T9161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.532922][ T9161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.551628][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.566882][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.583136][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.625326][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.692709][ T9161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.738566][ T9161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.753798][ T9161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.775041][ T9161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.790844][ T9165] device veth0_vlan entered promiscuous mode [ 173.828630][ T9187] Bluetooth: hci0: command 0x040f tx timeout [ 173.832938][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.852650][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.903038][ T9165] device veth1_vlan entered promiscuous mode [ 173.924718][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.939811][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.951944][ T9191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.965152][ T9163] device veth0_macvtap entered promiscuous mode [ 173.984918][ T9163] device veth1_macvtap entered promiscuous mode [ 174.045422][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.045445][ T9175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.067773][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.067822][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.067827][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.069420][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.098797][ T9175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.118747][ T34] Bluetooth: hci1: command 0x040f tx timeout [ 174.124992][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.126495][ T9165] device veth0_macvtap entered promiscuous mode [ 174.130678][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.131127][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.131572][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.238249][ T9196] Bluetooth: hci2: command 0x040f tx timeout [ 174.243782][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.262938][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.274781][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.285912][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.298667][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.314514][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.327744][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.339845][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.371805][ T9165] device veth1_macvtap entered promiscuous mode [ 174.411693][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.458960][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.510483][ T37] Bluetooth: hci3: command 0x040f tx timeout [ 174.518538][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.565539][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.581663][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.604483][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.622914][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.661375][ T9163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.673906][ T9163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.687722][ T9163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.700547][ T9163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.722880][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.728181][ T9182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.741907][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.752563][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.752570][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.752578][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.752582][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.752589][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 174.752594][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.753720][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.759349][ T9182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.789729][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.991554][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.043726][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.103853][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.167160][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.266593][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.312016][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.331624][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.344247][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 175.367138][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.397354][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.414458][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.429092][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.472370][ T9161] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 175.535496][ T9165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.587532][ T9165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.631142][ T9165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 22:31:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) [ 175.667237][ T9165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.789193][ T9175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.840533][ T9175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:31:32 executing program 1: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x511482, 0x0) write$tun(r0, 0x0, 0x0) [ 175.877241][ T9197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 22:31:32 executing program 0: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="9199feffffff00001c0012800b0001006970766c616e00000c00028006000100020000000a0005002200000000002f0008000a00605d22e2aea05d"], 0x50}}, 0x0) [ 175.896720][ T9197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.908735][ T9187] Bluetooth: hci0: command 0x0419 tx timeout 22:31:32 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') [ 175.944566][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.975021][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:31:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 176.023538][ T9197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.050094][ T9197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.064908][ T9175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.084408][ T9213] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 176.097581][ T9175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.121028][ T9213] bond_slave_0: Device is already in use. 22:31:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 176.155798][ T67] Bluetooth: hci1: command 0x0419 tx timeout 22:31:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) [ 176.196503][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.214522][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.318340][ T3494] Bluetooth: hci2: command 0x0419 tx timeout 22:31:32 executing program 3: timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0) 22:31:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0xb1, 0x0, 0x0) 22:31:32 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000180)=0x1000) [ 176.533096][ T46] kauditd_printk_skb: 2 callbacks suppressed [ 176.533108][ T46] audit: type=1800 audit(1603319492.697:31): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file0" dev="sda1" ino=16554 res=0 errno=0 [ 176.558852][ T3494] Bluetooth: hci3: command 0x0419 tx timeout [ 176.623060][ T9250] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 176.637494][ T9250] bond_slave_0: Device is already in use. 22:31:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:32 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x3c, 0x0, @empty, @local}}}}, 0x0) 22:31:32 executing program 3: socketpair(0x10, 0x3, 0x2, 0x0) 22:31:32 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x145042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000180)=0x1000) 22:31:32 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22:31:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, &(0x7f00000000c0)=0x5, 0x4) [ 176.698433][ T46] audit: type=1800 audit(1603319492.867:32): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="//selinux" name="file0" dev="sda1" ino=16554 res=0 errno=0 22:31:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 22:31:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) [ 176.815879][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:31:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:32 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(r0, 0x0, 0x0) [ 176.841420][ T9274] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 22:31:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) [ 176.876952][ T9274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.887295][ T9283] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.893240][ T9274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 22:31:33 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(r0, 0x0, 0x0) [ 176.907692][ T9283] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.918514][ T9274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.918531][ T9274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.921058][ T9274] device vxlan0 entered promiscuous mode 22:31:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:33 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:33 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22:31:33 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) [ 177.583971][ T9293] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:33 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(r0, 0x0, 0x0) [ 177.599107][ T9293] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:33 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) [ 177.641563][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 22:31:33 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:33 executing program 2: write$ppp(0xffffffffffffffff, 0x0, 0x0) [ 177.664886][ T9304] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 177.677342][ T9308] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:33 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) [ 177.705794][ T9308] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:34 executing program 2: write$ppp(0xffffffffffffffff, 0x0, 0x0) 22:31:34 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:34 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22:31:34 executing program 2: write$ppp(0xffffffffffffffff, 0x0, 0x0) [ 178.457254][ T9329] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:34 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) [ 178.494521][ T9329] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:34 executing program 2: r0 = openat$ppp(0xffffff9c, 0x0, 0x1, 0x0) write$ppp(r0, 0x0, 0x0) [ 178.496019][ T9331] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 22:31:34 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:34 executing program 2: r0 = openat$ppp(0xffffff9c, 0x0, 0x1, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:31:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:31:35 executing program 1: set_mempolicy(0x1, &(0x7f0000000000)=0x4, 0x120) 22:31:35 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:31:35 executing program 2: r0 = openat$ppp(0xffffff9c, 0x0, 0x1, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:35 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:35 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 22:31:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000040)=@ethtool_stats}) 22:31:35 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 22:31:35 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:35 executing program 1: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xfffffff9, 0x2340) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 22:31:35 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:35 executing program 2: r0 = openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:31:35 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24010000250001"], 0x124}}, 0x0) 22:31:35 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet, @rc, @nl=@proc}) 22:31:35 executing program 2: openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) 22:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 179.641348][ T9402] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:31:35 executing program 2: openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) 22:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:31:35 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x1) clock_gettime(0x0, &(0x7f0000000080)) 22:31:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:31:35 executing program 2: openat$ppp(0xffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) 22:31:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:31:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in={0x2, 0x4e21, @empty}, 0x80) 22:31:36 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x403, 0x1000) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x0, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 22:31:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@in={0x2, 0x4e21, @empty}, 0x80) 22:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000180)=@ethtool_ts_info}) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x0, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 22:31:36 executing program 2: futex(0x0, 0xdec8075e18f1cd71, 0x0, 0x0, 0x0, 0x0) 22:31:36 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xc4, 0x23, 0x0, 0x0, 0x0, 0x0, [@extra_flags={0x8}, @policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xc4}}, 0x0) 22:31:36 executing program 2: fchownat(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff, 0x1000) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 22:31:36 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x511482, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0x1c, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}]}, 0x1c}}, 0x0) 22:31:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@acquire={0x124, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@dev, {@in6=@private0, @in6=@loopback}, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0x124}}, 0x0) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x124}}, 0x0) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0x1c, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}]}, 0x1c}}, 0x0) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x124}}, 0x0) 22:31:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{0x0, 0x7}, {&(0x7f0000001540)=""/201, 0xc9}, {&(0x7f0000001700)=""/237, 0xed}], 0x3}}], 0x2, 0x40020102, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24010000170001"], 0x124}}, 0x0) 22:31:36 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:31:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x124}}, 0x0) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0x1c, 0x23, 0x1, 0x0, 0x0, 0x0, [@extra_flags={0x8}]}, 0x1c}}, 0x0) 22:31:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x43) 22:31:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getsadinfo={0xbc, 0x23, 0x1, 0x0, 0x0, 0x0, [@policy={0xa8, 0x7, {{@in=@dev, @in=@multicast2}}}]}, 0xbc}}, 0x0) [ 180.230395][ T9498] ================================================================== [ 180.240356][ T9498] BUG: KASAN: slab-out-of-bounds in xfrm_attr_cpy32+0x15a/0x1d0 [ 180.260791][ T9498] Write of size 4 at addr ffff88801c57e6c0 by task syz-executor.0/9498 [ 180.260791][ T9498] [ 180.260791][ T9498] CPU: 1 PID: 9498 Comm: syz-executor.0 Not tainted 5.9.0-syzkaller #0 [ 180.308041][ T9498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 180.321196][ T9498] Call Trace: [ 180.321196][ T9498] dump_stack+0x107/0x163 [ 180.321196][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 180.321196][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 180.352188][ T9498] print_address_description.constprop.0.cold+0xae/0x497 [ 180.372671][ T9498] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 180.372671][ T9498] ? vprintk_func+0x95/0x1e0 [ 180.398090][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 180.398090][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 180.414891][ T9498] kasan_report.cold+0x1f/0x37 [ 180.418074][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 180.418074][ T9498] check_memory_region+0x13d/0x180 [ 180.418074][ T9498] memset+0x20/0x40 [ 180.418074][ T9498] xfrm_attr_cpy32+0x15a/0x1d0 [ 180.448021][ T9498] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 180.452276][ T9498] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 180.469110][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 180.469110][ T9498] ? mark_lock+0xf7/0x23a0 [ 180.469110][ T9498] ? security_capable+0x8f/0xc0 [ 180.506764][ T9498] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 180.506764][ T9498] xfrm_user_rcv_msg+0x55b/0x8b0 [ 180.506764][ T9498] ? xfrm_do_migrate+0x800/0x800 [ 180.506764][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 180.506764][ T9498] ? lock_release+0x710/0x710 [ 180.545655][ T9498] ? __local_bh_enable_ip+0x9c/0x110 [ 180.545655][ T9498] ? __mutex_lock+0x626/0x10e0 [ 180.545655][ T9498] netlink_rcv_skb+0x153/0x420 [ 180.545655][ T9498] ? xfrm_do_migrate+0x800/0x800 [ 180.545655][ T9498] ? netlink_ack+0xaa0/0xaa0 [ 180.545655][ T9498] xfrm_netlink_rcv+0x6b/0x90 [ 180.545655][ T9498] netlink_unicast+0x533/0x7d0 [ 180.545655][ T9498] ? netlink_attachskb+0x810/0x810 [ 180.545655][ T9498] ? __phys_addr_symbol+0x2c/0x70 [ 180.545655][ T9498] ? __check_object_size+0x171/0x3f0 [ 180.545655][ T9498] netlink_sendmsg+0x856/0xd90 [ 180.545655][ T9498] ? netlink_unicast+0x7d0/0x7d0 [ 180.628826][ T9498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 180.628826][ T9498] ? netlink_unicast+0x7d0/0x7d0 [ 180.628826][ T9498] sock_sendmsg+0xcf/0x120 [ 180.628826][ T9498] ____sys_sendmsg+0x6e8/0x810 [ 180.658239][ T9498] ? kernel_sendmsg+0x50/0x50 [ 180.658239][ T9498] ? do_recvmmsg+0x6c0/0x6c0 [ 180.658239][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 180.658239][ T9498] ___sys_sendmsg+0xf3/0x170 [ 180.688069][ T9498] ? sendmsg_copy_msghdr+0x160/0x160 [ 180.688069][ T9498] ? __fget_files+0x272/0x400 [ 180.688069][ T9498] ? lock_downgrade+0x6d0/0x6d0 [ 180.688069][ T9498] ? __fget_files+0x294/0x400 [ 180.688069][ T9498] ? __fget_light+0xea/0x280 [ 180.688069][ T9498] __sys_sendmsg+0xe5/0x1b0 [ 180.688069][ T9498] ? __sys_sendmsg_sock+0xb0/0xb0 [ 180.688069][ T9498] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 180.688069][ T9498] __do_fast_syscall_32+0x56/0x80 [ 180.688069][ T9498] do_fast_syscall_32+0x2f/0x70 [ 180.688069][ T9498] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 180.688069][ T9498] RIP: 0023:0xf7f86549 [ 180.688069][ T9498] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 180.688069][ T9498] RSP: 002b:00000000f55800bc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 180.688069][ T9498] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 180.848012][ T9498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.848012][ T9498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.848012][ T9498] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 180.878683][ T9498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.878683][ T9498] [ 180.878683][ T9498] Allocated by task 9498: [ 180.878683][ T9498] kasan_save_stack+0x1b/0x40 [ 180.908314][ T9498] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 180.908314][ T9498] kvmalloc_node+0x61/0xf0 [ 180.908314][ T9498] xfrm_user_rcv_msg_compat+0x3cd/0x1040 [ 180.908314][ T9498] xfrm_user_rcv_msg+0x55b/0x8b0 [ 180.908314][ T9498] netlink_rcv_skb+0x153/0x420 [ 180.908314][ T9498] xfrm_netlink_rcv+0x6b/0x90 [ 180.908314][ T9498] netlink_unicast+0x533/0x7d0 [ 180.908314][ T9498] netlink_sendmsg+0x856/0xd90 [ 180.968040][ T9498] sock_sendmsg+0xcf/0x120 [ 180.968040][ T9498] ____sys_sendmsg+0x6e8/0x810 [ 180.968040][ T9498] ___sys_sendmsg+0xf3/0x170 [ 180.989293][ T9498] __sys_sendmsg+0xe5/0x1b0 [ 180.998214][ T9498] __do_fast_syscall_32+0x56/0x80 [ 181.002410][ T9498] do_fast_syscall_32+0x2f/0x70 [ 181.008135][ T9498] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 181.021119][ T9498] [ 181.021119][ T9498] Last call_rcu(): [ 181.028164][ T9498] kasan_save_stack+0x1b/0x40 [ 181.038045][ T9498] kasan_record_aux_stack+0x82/0xb0 [ 181.044732][ T9498] call_rcu+0xbb/0x700 [ 181.047987][ T9498] __nf_register_net_hook+0x2aa/0x610 [ 181.058092][ T9498] nf_register_net_hook+0x114/0x170 [ 181.068265][ T9498] nf_register_net_hooks+0x59/0xc0 [ 181.068265][ T9498] ip6t_register_table+0x235/0x2f0 [ 181.081067][ T9498] ip6table_security_table_init+0x82/0xc0 [ 181.088075][ T9498] xt_find_table_lock+0x2d4/0x540 [ 181.101306][ T9498] xt_request_find_table_lock+0x27/0xf0 [ 181.109121][ T9498] get_info+0x16a/0x740 [ 181.118104][ T9498] do_ip6t_get_ctl+0x152/0xa10 [ 181.121100][ T9498] nf_getsockopt+0x72/0xd0 [ 181.128134][ T9498] ipv6_getsockopt+0x1be/0x270 [ 181.128134][ T9498] tcp_getsockopt+0x86/0xd0 [ 181.141085][ T9498] __sys_getsockopt+0x219/0x4c0 [ 181.148046][ T9498] __do_compat_sys_socketcall+0x513/0x660 [ 181.148046][ T9498] __do_fast_syscall_32+0x56/0x80 [ 181.161625][ T9498] do_fast_syscall_32+0x2f/0x70 [ 181.168012][ T9498] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 181.178102][ T9498] [ 181.181536][ T9498] The buggy address belongs to the object at ffff88801c57e600 [ 181.181536][ T9498] which belongs to the cache kmalloc-192 of size 192 [ 181.198969][ T9498] The buggy address is located 0 bytes to the right of [ 181.198969][ T9498] 192-byte region [ffff88801c57e600, ffff88801c57e6c0) [ 181.208099][ T9498] The buggy address belongs to the page: [ 181.222124][ T9498] page:00000000d5f129f9 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801c57eb00 pfn:0x1c57e [ 181.227995][ T9498] flags: 0xfff00000000200(slab) [ 181.241071][ T9498] raw: 00fff00000000200 ffff888010041140 ffffea00008066c8 ffff888010040000 [ 181.249613][ T9498] raw: ffff88801c57eb00 ffff88801c57e000 000000010000000b 0000000000000000 [ 181.261163][ T9498] page dumped because: kasan: bad access detected [ 181.268071][ T9498] [ 181.268071][ T9498] Memory state around the buggy address: [ 181.281017][ T9498] ffff88801c57e580: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 181.288011][ T9498] ffff88801c57e600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 181.311465][ T9498] >ffff88801c57e680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 181.318010][ T9498] ^ [ 181.328051][ T9498] ffff88801c57e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.338044][ T9498] ffff88801c57e780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 181.348635][ T9498] ================================================================== [ 181.358057][ T9498] Disabling lock debugging due to kernel taint [ 181.380636][ T9498] Kernel panic - not syncing: panic_on_warn set ... [ 181.390592][ T9498] CPU: 0 PID: 9498 Comm: syz-executor.0 Tainted: G B 5.9.0-syzkaller #0 [ 181.398213][ T9498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 181.418069][ T9498] Call Trace: [ 181.418069][ T9498] dump_stack+0x107/0x163 [ 181.428611][ T9498] ? xfrm_attr_cpy32+0x120/0x1d0 [ 181.428611][ T9498] panic+0x306/0x73d [ 181.438026][ T9498] ? __warn_printk+0xf3/0xf3 [ 181.438026][ T9498] ? preempt_schedule_common+0x59/0xc0 [ 181.448027][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 181.448027][ T9498] ? preempt_schedule_thunk+0x16/0x18 [ 181.448027][ T9498] ? trace_hardirqs_on+0x51/0x1c0 [ 181.448027][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 181.478034][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 181.478034][ T9498] end_report+0x58/0x5e [ 181.488084][ T9498] kasan_report.cold+0xd/0x37 [ 181.498092][ T9498] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 181.498092][ T9498] check_memory_region+0x13d/0x180 [ 181.508169][ T9498] memset+0x20/0x40 [ 181.518172][ T9498] xfrm_attr_cpy32+0x15a/0x1d0 [ 181.518172][ T9498] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 181.528162][ T9498] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 181.528162][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 181.528162][ T9498] ? mark_lock+0xf7/0x23a0 [ 181.548173][ T9498] ? security_capable+0x8f/0xc0 [ 181.558047][ T9498] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 181.568186][ T9498] xfrm_user_rcv_msg+0x55b/0x8b0 [ 181.568186][ T9498] ? xfrm_do_migrate+0x800/0x800 [ 181.578162][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 181.588188][ T9498] ? lock_release+0x710/0x710 [ 181.598172][ T9498] ? __local_bh_enable_ip+0x9c/0x110 [ 181.608034][ T9498] ? __mutex_lock+0x626/0x10e0 [ 181.608034][ T9498] netlink_rcv_skb+0x153/0x420 [ 181.618031][ T9498] ? xfrm_do_migrate+0x800/0x800 [ 181.628071][ T9498] ? netlink_ack+0xaa0/0xaa0 [ 181.628071][ T9498] xfrm_netlink_rcv+0x6b/0x90 [ 181.638066][ T9498] netlink_unicast+0x533/0x7d0 [ 181.648115][ T9498] ? netlink_attachskb+0x810/0x810 [ 181.648115][ T9498] ? __phys_addr_symbol+0x2c/0x70 [ 181.658265][ T9498] ? __check_object_size+0x171/0x3f0 [ 181.668058][ T9498] netlink_sendmsg+0x856/0xd90 [ 181.668058][ T9498] ? netlink_unicast+0x7d0/0x7d0 [ 181.678026][ T9498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 181.688042][ T9498] ? netlink_unicast+0x7d0/0x7d0 [ 181.688042][ T9498] sock_sendmsg+0xcf/0x120 [ 181.698039][ T9498] ____sys_sendmsg+0x6e8/0x810 [ 181.708058][ T9498] ? kernel_sendmsg+0x50/0x50 [ 181.708058][ T9498] ? do_recvmmsg+0x6c0/0x6c0 [ 181.708058][ T9498] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 181.728053][ T9498] ___sys_sendmsg+0xf3/0x170 [ 181.728082][ T9498] ? sendmsg_copy_msghdr+0x160/0x160 [ 181.738039][ T9498] ? __fget_files+0x272/0x400 [ 181.738039][ T9498] ? lock_downgrade+0x6d0/0x6d0 [ 181.748039][ T9498] ? __fget_files+0x294/0x400 [ 181.748039][ T9498] ? __fget_light+0xea/0x280 [ 181.760837][ T9498] __sys_sendmsg+0xe5/0x1b0 [ 181.768103][ T9498] ? __sys_sendmsg_sock+0xb0/0xb0 [ 181.778007][ T9498] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 181.778007][ T9498] __do_fast_syscall_32+0x56/0x80 [ 181.788018][ T9498] do_fast_syscall_32+0x2f/0x70 [ 181.798035][ T9498] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 181.798035][ T9498] RIP: 0023:0xf7f86549 [ 181.808066][ T9498] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.837994][ T9498] RSP: 002b:00000000f55800bc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 181.848053][ T9498] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 181.858017][ T9498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.878144][ T9498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.898365][ T9498] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 181.898365][ T9498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.928081][ T9498] Kernel Offset: disabled [ 181.928081][ T9498] Rebooting in 86400 seconds..