[ 52.555258] audit: type=1800 audit(1545322202.600:25): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.102013] kauditd_printk_skb: 3 callbacks suppressed [ 54.102042] audit: type=1800 audit(1545322204.150:29): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 54.126696] audit: type=1800 audit(1545322204.150:30): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2018/12/20 16:10:17 fuzzer started 2018/12/20 16:10:21 dialing manager at 10.128.0.26:46613 2018/12/20 16:10:21 syscalls: 1 2018/12/20 16:10:21 code coverage: enabled 2018/12/20 16:10:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 16:10:21 setuid sandbox: enabled 2018/12/20 16:10:21 namespace sandbox: enabled 2018/12/20 16:10:21 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 16:10:21 fault injection: enabled 2018/12/20 16:10:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 16:10:21 net packet injection: enabled 2018/12/20 16:10:21 net device setup: enabled 16:11:30 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x5}, 0x20) syzkaller login: [ 141.452223] IPVS: ftp: loaded support on port[0] = 21 [ 142.834220] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.840782] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.849136] device bridge_slave_0 entered promiscuous mode [ 142.932781] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.939321] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.947592] device bridge_slave_1 entered promiscuous mode [ 143.028249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.107903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.359626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.444829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.530019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.537091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.622151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.629162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.884421] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.893099] team0: Port device team_slave_0 added [ 143.973947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.982646] team0: Port device team_slave_1 added [ 144.067328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.145053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.229265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.236959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.246282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.332254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.339889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.349365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:11:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) [ 145.249676] IPVS: ftp: loaded support on port[0] = 21 [ 145.548445] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.555077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.562252] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.568788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.578031] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.584616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.339644] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.346258] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.354615] device bridge_slave_0 entered promiscuous mode [ 147.518885] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.525466] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.533712] device bridge_slave_1 entered promiscuous mode [ 147.678589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.798137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.178445] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.296265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.768536] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 148.777148] team0: Port device team_slave_0 added [ 148.945286] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 148.953979] team0: Port device team_slave_1 added [ 149.131026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.138129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.147372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.281002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.288008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.296923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.411200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 149.419012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.428225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.607212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 149.614834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.623886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:11:40 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3580}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, 0x0) [ 150.969402] IPVS: ftp: loaded support on port[0] = 21 [ 151.314850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.322408] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.328966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.336171] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.342777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.352115] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.358600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.941297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 152.484229] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 152.490573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.498740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.994043] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.951186] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.957806] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.966261] device bridge_slave_0 entered promiscuous mode [ 154.158043] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.164632] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.173284] device bridge_slave_1 entered promiscuous mode [ 154.345977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.508807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.113400] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.299968] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.020411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.029126] team0: Port device team_slave_0 added [ 156.233377] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.245111] team0: Port device team_slave_1 added [ 156.433666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.602348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 156.609296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.618410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.787224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 156.794943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.803936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 16:11:46 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x5}, 0x20) [ 156.962382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 156.970324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.979421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:11:47 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x5}, 0x20) 16:11:47 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x5}, 0x20) 16:11:47 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) lsetxattr(0x0, 0x0, &(0x7f0000000180)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x003\xc4\xe4L~gOi\x1aI\xf9~\xd9\xef\x04\xb7\x16\xfa\xbd\xdd\x83~*\xdd[\x8e\x19C\xa7\xac5\xb8\x86\xc2\x19\x16\xc2m\x8b\x05\x15\x00\xda\x8c|\x98\xe7\x8dVh\xa8\xb8\xa8\x16\x17\x9f\xe6A\xb7\x00x\x11v\xd4\xa4\xe2\xe3\xfc^\x86\xda*pw\x10P\xe9(\xd3&?\xf9 \xdd$x\xb8\xc4\xf3\xdc\x80\xcd&A\x8a\x1d\x88)\a1\xc5l\x89\xeb\xaa\x11c\xa5\x9b\xad\xff\xcd\x1f8=\xe9\x11\xd7J\x97j#\"\x8b\xb8n\xb2{\xd0z#\x1f\xdfC\xdaG\xc3\xfa\x83;\f\xe3\xa3\xe9<\xa7\xc9\xd8CL\xad\xe9X\x8e|\xfc\x92!\x99\x9c\xd6y\xf0\xd9\x01[\bjt\fJ\xb2\x97[\xa2\xf0\xf31\xd5*\xe6\x03\x85\x15\x94\x1a\xbeY\n\xd1*+\xcf\xa6\xc5\x01\xa1\xceE\x00\x00\x00\x00\x00\x00\x00\x82 Pmq\xff\x92\xe4\b:G\x9b\x1f\xafue\xbc\xeb\xa1\x03\xac\x16`\xc2\xbb\x95L\x00Z\x972\x0e\xfeR\x99\xd9\x8b=\x92\xd4\xd8\xcb0\xf0\x7f\xca\x1c\x1b\xf0%\xcd*\x8e\xa1\xba\xd0\x16\xa8\xd1\xe5(|\x10', 0x121, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f00000001c0)=""/174) 16:11:47 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) lsetxattr(0x0, 0x0, &(0x7f0000000180)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x003\xc4\xe4L~gOi\x1aI\xf9~\xd9\xef\x04\xb7\x16\xfa\xbd\xdd\x83~*\xdd[\x8e\x19C\xa7\xac5\xb8\x86\xc2\x19\x16\xc2m\x8b\x05\x15\x00\xda\x8c|\x98\xe7\x8dVh\xa8\xb8\xa8\x16\x17\x9f\xe6A\xb7\x00x\x11v\xd4\xa4\xe2\xe3\xfc^\x86\xda*pw\x10P\xe9(\xd3&?\xf9 \xdd$x\xb8\xc4\xf3\xdc\x80\xcd&A\x8a\x1d\x88)\a1\xc5l\x89\xeb\xaa\x11c\xa5\x9b\xad\xff\xcd\x1f8=\xe9\x11\xd7J\x97j#\"\x8b\xb8n\xb2{\xd0z#\x1f\xdfC\xdaG\xc3\xfa\x83;\f\xe3\xa3\xe9<\xa7\xc9\xd8CL\xad\xe9X\x8e|\xfc\x92!\x99\x9c\xd6y\xf0\xd9\x01[\bjt\fJ\xb2\x97[\xa2\xf0\xf31\xd5*\xe6\x03\x85\x15\x94\x1a\xbeY\n\xd1*+\xcf\xa6\xc5\x01\xa1\xceE\x00\x00\x00\x00\x00\x00\x00\x82 Pmq\xff\x92\xe4\b:G\x9b\x1f\xafue\xbc\xeb\xa1\x03\xac\x16`\xc2\xbb\x95L\x00Z\x972\x0e\xfeR\x99\xd9\x8b=\x92\xd4\xd8\xcb0\xf0\x7f\xca\x1c\x1b\xf0%\xcd*\x8e\xa1\xba\xd0\x16\xa8\xd1\xe5(|\x10', 0x121, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f00000001c0)=""/174) 16:11:47 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) lsetxattr(0x0, 0x0, &(0x7f0000000180)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x003\xc4\xe4L~gOi\x1aI\xf9~\xd9\xef\x04\xb7\x16\xfa\xbd\xdd\x83~*\xdd[\x8e\x19C\xa7\xac5\xb8\x86\xc2\x19\x16\xc2m\x8b\x05\x15\x00\xda\x8c|\x98\xe7\x8dVh\xa8\xb8\xa8\x16\x17\x9f\xe6A\xb7\x00x\x11v\xd4\xa4\xe2\xe3\xfc^\x86\xda*pw\x10P\xe9(\xd3&?\xf9 \xdd$x\xb8\xc4\xf3\xdc\x80\xcd&A\x8a\x1d\x88)\a1\xc5l\x89\xeb\xaa\x11c\xa5\x9b\xad\xff\xcd\x1f8=\xe9\x11\xd7J\x97j#\"\x8b\xb8n\xb2{\xd0z#\x1f\xdfC\xdaG\xc3\xfa\x83;\f\xe3\xa3\xe9<\xa7\xc9\xd8CL\xad\xe9X\x8e|\xfc\x92!\x99\x9c\xd6y\xf0\xd9\x01[\bjt\fJ\xb2\x97[\xa2\xf0\xf31\xd5*\xe6\x03\x85\x15\x94\x1a\xbeY\n\xd1*+\xcf\xa6\xc5\x01\xa1\xceE\x00\x00\x00\x00\x00\x00\x00\x82 Pmq\xff\x92\xe4\b:G\x9b\x1f\xafue\xbc\xeb\xa1\x03\xac\x16`\xc2\xbb\x95L\x00Z\x972\x0e\xfeR\x99\xd9\x8b=\x92\xd4\xd8\xcb0\xf0\x7f\xca\x1c\x1b\xf0%\xcd*\x8e\xa1\xba\xd0\x16\xa8\xd1\xe5(|\x10', 0x121, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f00000001c0)=""/174) 16:11:47 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x4, &(0x7f0000000200)='\xe7 \xbf\x80]\xe0f\x99\xfd\xa9\xba\xabL\x95\x04g\xb6\xa1\xf4\xdb\x1d\xbb+O\xfd\x7f\xda\x14\xea\xed\x86+6\xfa\xae\x18\x82P\b[\x8f\x1f5\xf6\x05){\xd9\xa2\x1d\xe4\xfe$\xde\xb32\x827<\xcb\f-\xa99\xb1he3\xe9\xbb\xd3') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) 16:11:48 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) lsetxattr(0x0, 0x0, &(0x7f0000000180)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x003\xc4\xe4L~gOi\x1aI\xf9~\xd9\xef\x04\xb7\x16\xfa\xbd\xdd\x83~*\xdd[\x8e\x19C\xa7\xac5\xb8\x86\xc2\x19\x16\xc2m\x8b\x05\x15\x00\xda\x8c|\x98\xe7\x8dVh\xa8\xb8\xa8\x16\x17\x9f\xe6A\xb7\x00x\x11v\xd4\xa4\xe2\xe3\xfc^\x86\xda*pw\x10P\xe9(\xd3&?\xf9 \xdd$x\xb8\xc4\xf3\xdc\x80\xcd&A\x8a\x1d\x88)\a1\xc5l\x89\xeb\xaa\x11c\xa5\x9b\xad\xff\xcd\x1f8=\xe9\x11\xd7J\x97j#\"\x8b\xb8n\xb2{\xd0z#\x1f\xdfC\xdaG\xc3\xfa\x83;\f\xe3\xa3\xe9<\xa7\xc9\xd8CL\xad\xe9X\x8e|\xfc\x92!\x99\x9c\xd6y\xf0\xd9\x01[\bjt\fJ\xb2\x97[\xa2\xf0\xf31\xd5*\xe6\x03\x85\x15\x94\x1a\xbeY\n\xd1*+\xcf\xa6\xc5\x01\xa1\xceE\x00\x00\x00\x00\x00\x00\x00\x82 Pmq\xff\x92\xe4\b:G\x9b\x1f\xafue\xbc\xeb\xa1\x03\xac\x16`\xc2\xbb\x95L\x00Z\x972\x0e\xfeR\x99\xd9\x8b=\x92\xd4\xd8\xcb0\xf0\x7f\xca\x1c\x1b\xf0%\xcd*\x8e\xa1\xba\xd0\x16\xa8\xd1\xe5(|\x10', 0x121, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f00000001c0)=""/174) 16:11:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000003c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x6}, 0xfeb4}}, 0x0) [ 158.489805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.573013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.593597] IPVS: ftp: loaded support on port[0] = 21 16:11:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000003c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x6}, 0xfeb4}}, 0x0) [ 158.840007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.958760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.432277] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.439353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.446601] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.453203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.462104] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.469923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.494466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.162631] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.168931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.176834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.732221] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.511891] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.518410] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.526696] device bridge_slave_0 entered promiscuous mode [ 161.760168] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.766769] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.775063] device bridge_slave_1 entered promiscuous mode [ 161.961814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.159442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.615030] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.799351] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.925186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.932337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.111077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 163.118252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.642276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.650952] team0: Port device team_slave_0 added [ 163.829695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.838401] team0: Port device team_slave_1 added [ 164.038906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 164.045972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.055042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.240643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 164.247836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.257776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 16:11:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) [ 164.472283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.479917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.489030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.669127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.676811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.685884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.098254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.300936] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.307720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.314969] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.321543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.330535] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.337087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.685465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.119288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.125690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.133680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.745714] 8021q: adding VLAN 0 to HW filter on device team0 16:12:01 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3580}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, 0x0) 16:12:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000003c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x6}, 0xfeb4}}, 0x0) 16:12:01 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xc, 0x103, 0x1, {0xf, 0xfffffffffffffffe, 0x10001, 0x7}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x4, 0x8000, 0x1f, 0x7, 0xd5, 0x5, 0x5, r2}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000240)={0xc0, 0x47, &(0x7f00000001c0)="f06e00965d51021c1de4101f81c31231ebb120798673f1f80e8400695992eb0443564069edf9914adb1e00081048dcbfaf28dcae0414f0b6381a1bf4075cc038a42300432be364416b08aa0c75abbb971ad9eb399dfdf279df4dd49fdc44db1c", {0x4, 0xffffffffffffff01, 0x30374d56, 0x1, 0x5, 0x4, 0xc}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000280)={0xb8, 0x4, 0x0, 0x401, 0x8000, 0x5}) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x9, 0x800}, 0x0, 0x3, 0x2, {0x7d, 0xfff}, 0xffff, 0x1}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000400)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x410001, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000004c0)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000500)={'exec ', '\x00'}, 0x6) bind$netlink(r1, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc}, 0xc) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000580)={0x0, 0xb6d, 0x701f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000005c0)={0x4, 0x7fff, 0x0, 0x7, 0x3, 0x4}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000640)=0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000880)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r4, 0x2}}, 0x18) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000940)=0x1ff) ioctl$int_in(r1, 0x5473, &(0x7f0000000980)=0x2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000009c0)=0x0) ptrace$cont(0x27, r5, 0x8, 0x5c0d) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000a00)) fsetxattr$security_smack_transmute(r0, &(0x7f0000000a40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000a80)='TRUE', 0x4, 0x1) process_vm_writev(r5, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/190, 0xbe}, {&(0x7f0000000c40)=""/207, 0xcf}, {&(0x7f0000000d40)=""/224, 0xe0}, {&(0x7f0000000e40)=""/194, 0xc2}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000fc0)=""/242, 0xf2}, {&(0x7f00000010c0)=""/167, 0xa7}, {&(0x7f0000001180)=""/144, 0x90}], 0x3, 0x0) 16:12:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6fcb8c34, 0xffffffffffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x1000, "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"}, &(0x7f0000001140)=0x1008) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001180)) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) connect$netlink(r0, &(0x7f00000011c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000001200)={0x0, 0x4, 0x5, 0x0, 0x6, 0x1, 0xffffffffffffff80, 0x8, 0x1f84, 0x6, 0x5, 0x7, 0x0, 0x10001, 0x2, 0x100000000, 0x5, 0xf62, 0x80000000}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001240)={'irlan0\x00'}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001280)=0x71, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000012c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001300)={r2}) fstat(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001400)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000001500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0}, &(0x7f00000016c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) r8 = getegid() getresgid(&(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)=0x0) getgroups(0x2, &(0x7f0000001840)=[0x0, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000001880)=[0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000001340)='system.posix_acl_default\x00', &(0x7f00000018c0)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x1, r4}, {0x2, 0x3, r5}, {0x2, 0x5, r6}], {0x4, 0x1}, [{0x8, 0x4, r7}, {0x8, 0x0, r8}, {0x8, 0x2, r9}, {0x8, 0x1, r10}, {0x8, 0x5, r11}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001940)={r1, 0x8001}, 0x8) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000001980)={0x200, "7b3abe3971371d8a187f84cd4def7eb6c2a59d7ca4480602bf18008c7b7d713f", 0xc8, 0x7, 0x6, 0x0, 0x5}) write$smack_current(r0, &(0x7f0000001a00)=',keyring(#\\(\x00', 0xd) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/urandom\x00', 0x4080, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40286608, &(0x7f0000001a80)={0x2, 0x9, 0x8, 0x5, 0x0, 0x6}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000001ac0)) 16:12:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) [ 171.196557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) 16:12:01 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3580}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, 0x0) [ 171.883113] IPVS: ftp: loaded support on port[0] = 21 [ 171.953014] IPVS: ftp: loaded support on port[0] = 21 [ 171.968205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.440497] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.928936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.935324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.943355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.437685] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.784339] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.791054] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.799334] device bridge_slave_0 entered promiscuous mode [ 173.905430] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.912043] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.920360] device bridge_slave_1 entered promiscuous mode [ 174.044131] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.050729] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.059127] device bridge_slave_0 entered promiscuous mode [ 174.087932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.224253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.257136] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.263731] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.272193] device bridge_slave_1 entered promiscuous mode [ 174.407016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.524300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.545339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.658198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.919433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.037405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.150819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.157966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.245761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.253027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.330625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.339426] team0: Port device team_slave_0 added [ 175.455745] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.464509] team0: Port device team_slave_1 added [ 175.605809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.614287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.623340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.650285] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.659007] team0: Port device team_slave_0 added [ 175.724356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.822727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.831408] team0: Port device team_slave_1 added [ 175.845524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.855270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.864540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.954446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.998252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.007009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.016079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.101338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.108706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.117628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.240893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.248737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.257907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.402049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.409675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.420663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:12:06 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x4, &(0x7f0000000200)='\xe7 \xbf\x80]\xe0f\x99\xfd\xa9\xba\xabL\x95\x04g\xb6\xa1\xf4\xdb\x1d\xbb+O\xfd\x7f\xda\x14\xea\xed\x86+6\xfa\xae\x18\x82P\b[\x8f\x1f5\xf6\x05){\xd9\xa2\x1d\xe4\xfe$\xde\xb32\x827<\xcb\f-\xa99\xb1he3\xe9\xbb\xd3') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) 16:12:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000003c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x6}, 0xfeb4}}, 0x0) 16:12:06 executing program 1: r0 = memfd_create(&(0x7f0000000180)='h\x01\x00\x00\xa9^\xb4\x8c$j\x12\x06,&c\xb5\xb2\xe1\xc4\a\x00\x00\x00\x00\x00M_in_byt\x03\x00\x00\x00\x00\x00\xa3%\x00\x00\x00\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) socketpair$unix(0x1, 0x1001, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)='./file0/file0\x00') fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 16:12:06 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3580}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, 0x0) [ 176.634861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:12:06 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x4000000) 16:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000070000008c000040050000a9ff01000000000000000000400000000001000000e4fffff0d901fbb1d163e2ff34170000000000000a00000006ed"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x186, 0x0, 0xfa}]}) 16:12:07 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x4, &(0x7f0000000200)='\xe7 \xbf\x80]\xe0f\x99\xfd\xa9\xba\xabL\x95\x04g\xb6\xa1\xf4\xdb\x1d\xbb+O\xfd\x7f\xda\x14\xea\xed\x86+6\xfa\xae\x18\x82P\b[\x8f\x1f5\xf6\x05){\xd9\xa2\x1d\xe4\xfe$\xde\xb32\x827<\xcb\f-\xa99\xb1he3\xe9\xbb\xd3') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) [ 176.973138] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 177.780052] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.786718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.793916] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.800460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.809585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.816627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.068576] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.075232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.082412] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.088960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.098090] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.891851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.285379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.610256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.620970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.920328] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.935336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.941750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.949543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.226246] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.232819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.240742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.261659] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.557570] 8021q: adding VLAN 0 to HW filter on device team0 16:12:14 executing program 3: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000002bc0)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x4, &(0x7f0000000200)='\xe7 \xbf\x80]\xe0f\x99\xfd\xa9\xba\xabL\x95\x04g\xb6\xa1\xf4\xdb\x1d\xbb+O\xfd\x7f\xda\x14\xea\xed\x86+6\xfa\xae\x18\x82P\b[\x8f\x1f5\xf6\x05){\xd9\xa2\x1d\xe4\xfe$\xde\xb32\x827<\xcb\f-\xa99\xb1he3\xe9\xbb\xd3') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) 16:12:14 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000000f00ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:12:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910000003900090023000c001200000011000500fe800b000000c78b80082314e9030b9d566885b167320b001b0038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0) 16:12:14 executing program 1: r0 = memfd_create(&(0x7f0000000180)='h\x01\x00\x00\xa9^\xb4\x8c$j\x12\x06,&c\xb5\xb2\xe1\xc4\a\x00\x00\x00\x00\x00M_in_byt\x03\x00\x00\x00\x00\x00\xa3%\x00\x00\x00\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) socketpair$unix(0x1, 0x1001, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)='./file0/file0\x00') fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 16:12:14 executing program 2: waitid(0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)) 16:12:14 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x4000000) 16:12:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6}}}, 0xb8}}, 0x0) [ 184.660857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.667527] IPv6: NLM_F_CREATE should be set when creating new route [ 184.674159] IPv6: NLM_F_CREATE should be set when creating new route 16:12:14 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000000f00ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:12:14 executing program 2: waitid(0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)) 16:12:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6}}}, 0xb8}}, 0x0) 16:12:14 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x4000000) 16:12:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910000003900090023000c001200000011000500fe800b000000c78b80082314e9030b9d566885b167320b001b0038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0) 16:12:15 executing program 2: waitid(0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)) 16:12:15 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000000f00ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:12:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6}}}, 0xb8}}, 0x0) [ 185.113259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 16:12:15 executing program 1: r0 = memfd_create(&(0x7f0000000180)='h\x01\x00\x00\xa9^\xb4\x8c$j\x12\x06,&c\xb5\xb2\xe1\xc4\a\x00\x00\x00\x00\x00M_in_byt\x03\x00\x00\x00\x00\x00\xa3%\x00\x00\x00\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) socketpair$unix(0x1, 0x1001, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)='./file0/file0\x00') fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 16:12:15 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x4000000) 16:12:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910000003900090023000c001200000011000500fe800b000000c78b80082314e9030b9d566885b167320b001b0038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0) 16:12:15 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000000f00ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:12:15 executing program 2: waitid(0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)) 16:12:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6}}}, 0xb8}}, 0x0) 16:12:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 185.519042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 16:12:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:12:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f0860fe01b2a4a280930a600800ffa84302910000003900090023000c001200000011000500fe800b000000c78b80082314e9030b9d566885b167320b001b0038d54400009b84136ef75afb83de48", 0x55}], 0x1}, 0x0) 16:12:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}}], 0x1, 0x0) 16:12:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 185.819691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 16:12:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:12:16 executing program 1: r0 = memfd_create(&(0x7f0000000180)='h\x01\x00\x00\xa9^\xb4\x8c$j\x12\x06,&c\xb5\xb2\xe1\xc4\a\x00\x00\x00\x00\x00M_in_byt\x03\x00\x00\x00\x00\x00\xa3%\x00\x00\x00\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) socketpair$unix(0x1, 0x1001, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)='./file0/file0\x00') fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) 16:12:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:12:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:12:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}}], 0x1, 0x0) 16:12:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:12:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}}], 0x1, 0x0) 16:12:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:12:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000600), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 16:12:17 executing program 2: unshare(0x28020400) r0 = socket$inet6(0xa, 0x5, 0x0) connect(r0, &(0x7f0000000080)=@generic={0x0, "8d96db4e381e29f43d498f99005fe0ace35d6cedb23859b4d41785a1eb693d41adb510d8191c0cceca98dd30fce9fb6c1ed8dc424d305262c0fd093ec0c520cb497a6711d9383f06eb78d07ad175ec7082ae742ca73e9a3a7058f430ab9e9e9b0d1852b535cfaebec0dae2e94e49fbca756108115f75e6fd21480ff22398"}, 0x80) 16:12:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}}], 0x1, 0x0) 16:12:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16:12:17 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000ac0)='./bus\x00', 0x0) open$dir(&(0x7f0000000980)='./file1\x00', 0xfffffffffffffffe, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=@dstopts, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setfsuid(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) tgkill(0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='security.evm\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000f7ff000000"], 0x1, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 16:12:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) ioctl(r0, 0xffffffffffffffc2, &(0x7f0000000000)) [ 187.056980] ================================================================== [ 187.064542] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 187.071151] CPU: 1 PID: 8330 Comm: syz-executor4 Not tainted 4.20.0-rc7+ #8 [ 187.078280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.087643] Call Trace: [ 187.090245] dump_stack+0x173/0x1d0 [ 187.093932] kmsan_report+0x120/0x290 [ 187.097765] kmsan_internal_check_memory+0x9a7/0xa20 [ 187.102890] ? __local_bh_enable_ip+0xb3/0x1a0 [ 187.107517] __msan_instrument_asm_load+0x8a/0x90 [ 187.112378] __siphash_aligned+0x512/0xae0 [ 187.116661] secure_tcpv6_seq+0x143/0x2b0 [ 187.120828] ? inet6_hash_connect+0x176/0x1a0 [ 187.125354] tcp_v6_connect+0x242b/0x2890 [ 187.129557] ? __msan_poison_alloca+0x1e0/0x270 [ 187.134258] ? tcp_v6_pre_connect+0x130/0x130 [ 187.138813] __inet_stream_connect+0x2f9/0x1340 [ 187.143512] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 187.148408] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 187.153159] tcp_sendmsg_locked+0x65d5/0x6be0 [ 187.157678] ? aa_label_sk_perm+0xda/0x940 [ 187.161955] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.167351] ? aa_label_sk_perm+0x6d6/0x940 [ 187.171692] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 187.177067] ? futex_wait+0x912/0xc40 [ 187.180931] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 187.186338] tcp_sendmsg+0xb2/0x100 [ 187.189990] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 187.194676] inet_sendmsg+0x54a/0x720 [ 187.198507] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.203889] ? security_socket_sendmsg+0x1bd/0x200 [ 187.208852] ? inet_getname+0x490/0x490 [ 187.212859] __sys_sendto+0x8c4/0xac0 [ 187.216730] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 187.222205] ? prepare_exit_to_usermode+0x114/0x420 [ 187.227230] ? syscall_return_slowpath+0x50/0x650 [ 187.232095] __se_sys_sendto+0x107/0x130 [ 187.236189] __x64_sys_sendto+0x6e/0x90 [ 187.240196] do_syscall_64+0xbc/0xf0 [ 187.243931] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.249141] RIP: 0033:0x457669 [ 187.252361] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.271268] RSP: 002b:00007f4d86386c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.278988] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 187.286272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 187.293553] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 187.300833] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f4d863876d4 [ 187.308141] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 187.315441] [ 187.317098] Local variable description: ----combined@secure_tcpv6_seq [ 187.323688] Variable was created at: [ 187.327412] secure_tcpv6_seq+0x7d/0x2b0 [ 187.331480] tcp_v6_connect+0x242b/0x2890 [ 187.335639] [ 187.337274] Bytes 4-7 of 8 are uninitialized [ 187.341684] Memory access of size 8 starts at ffff88814e6ff658 [ 187.347651] ================================================================== [ 187.355013] Disabling lock debugging due to kernel taint [ 187.360463] Kernel panic - not syncing: panic_on_warn set ... [ 187.366365] CPU: 1 PID: 8330 Comm: syz-executor4 Tainted: G B 4.20.0-rc7+ #8 [ 187.374873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.384229] Call Trace: [ 187.386850] dump_stack+0x173/0x1d0 [ 187.390537] panic+0x3ce/0x961 [ 187.393796] kmsan_report+0x285/0x290 [ 187.397624] kmsan_internal_check_memory+0x9a7/0xa20 [ 187.402751] ? __local_bh_enable_ip+0xb3/0x1a0 [ 187.407375] __msan_instrument_asm_load+0x8a/0x90 [ 187.412237] __siphash_aligned+0x512/0xae0 [ 187.416526] secure_tcpv6_seq+0x143/0x2b0 [ 187.420696] ? inet6_hash_connect+0x176/0x1a0 [ 187.425217] tcp_v6_connect+0x242b/0x2890 [ 187.429402] ? __msan_poison_alloca+0x1e0/0x270 [ 187.434105] ? tcp_v6_pre_connect+0x130/0x130 [ 187.439067] __inet_stream_connect+0x2f9/0x1340 [ 187.443759] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 187.448626] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 187.453332] tcp_sendmsg_locked+0x65d5/0x6be0 [ 187.457850] ? aa_label_sk_perm+0xda/0x940 [ 187.462107] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.467493] ? aa_label_sk_perm+0x6d6/0x940 [ 187.471833] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 187.477213] ? futex_wait+0x912/0xc40 [ 187.481087] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 187.486510] tcp_sendmsg+0xb2/0x100 [ 187.490174] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 187.494862] inet_sendmsg+0x54a/0x720 [ 187.498685] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.504068] ? security_socket_sendmsg+0x1bd/0x200 [ 187.509027] ? inet_getname+0x490/0x490 [ 187.513027] __sys_sendto+0x8c4/0xac0 [ 187.516892] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 187.522363] ? prepare_exit_to_usermode+0x114/0x420 [ 187.527393] ? syscall_return_slowpath+0x50/0x650 [ 187.532268] __se_sys_sendto+0x107/0x130 [ 187.536363] __x64_sys_sendto+0x6e/0x90 [ 187.540354] do_syscall_64+0xbc/0xf0 [ 187.544090] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.549290] RIP: 0033:0x457669 [ 187.552502] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.571484] RSP: 002b:00007f4d86386c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.579234] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 187.586540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 187.593841] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 187.601139] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f4d863876d4 [ 187.608435] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 187.616802] Kernel Offset: disabled [ 187.620442] Rebooting in 86400 seconds..