[ 54.653376][ T26] audit: type=1800 audit(1572011464.166:25): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.686515][ T26] audit: type=1800 audit(1572011464.166:26): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.723821][ T26] audit: type=1800 audit(1572011464.176:27): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 55.247185][ T8637] sshd (8637) used greatest stack depth: 22888 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. 2019/10/25 13:51:12 fuzzer started 2019/10/25 13:51:13 dialing manager at 10.128.0.26:34137 2019/10/25 13:51:14 syscalls: 2525 2019/10/25 13:51:14 code coverage: enabled 2019/10/25 13:51:14 comparison tracing: enabled 2019/10/25 13:51:14 extra coverage: extra coverage is not supported by the kernel 2019/10/25 13:51:14 setuid sandbox: enabled 2019/10/25 13:51:14 namespace sandbox: enabled 2019/10/25 13:51:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/25 13:51:14 fault injection: enabled 2019/10/25 13:51:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/25 13:51:14 net packet injection: enabled 2019/10/25 13:51:14 net device setup: enabled 2019/10/25 13:51:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 13:53:06 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0xee, [], 0x0}) 13:53:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07f02a0000000100ff071e000000450001070300001419001a0012000200040001000a002500"/57, 0x39}], 0x1) syzkaller login: [ 177.221949][ T8738] IPVS: ftp: loaded support on port[0] = 21 [ 177.257709][ T8740] IPVS: ftp: loaded support on port[0] = 21 13:53:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x203, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}, {@in6=@ipv4={[], [], @remote}}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 177.431437][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 177.526393][ T8740] chnl_net:caif_netlink_parms(): no params data found [ 177.584529][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.596959][ T8744] IPVS: ftp: loaded support on port[0] = 21 [ 177.598387][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.619495][ T8738] device bridge_slave_0 entered promiscuous mode [ 177.656028][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.670371][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.678828][ T8738] device bridge_slave_1 entered promiscuous mode [ 177.689048][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.696113][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state 13:53:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000080)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x0e\x00\x00\xff\x04\x00\x00\x00\t\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\x00\x00\x00') [ 177.708162][ T8740] device bridge_slave_0 entered promiscuous mode [ 177.746517][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.755586][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.778785][ T8740] device bridge_slave_1 entered promiscuous mode [ 177.814184][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.854031][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.879891][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.912219][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.964296][ T8740] team0: Port device team_slave_0 added [ 177.973291][ T8738] team0: Port device team_slave_0 added [ 177.989680][ T8738] team0: Port device team_slave_1 added [ 178.004141][ T8740] team0: Port device team_slave_1 added [ 178.012576][ T8746] IPVS: ftp: loaded support on port[0] = 21 13:53:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007980)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000300)="bb", 0x1}], 0x1}}, {{&(0x7f00000017c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000001800)=':', 0x1}], 0x1}}], 0x2, 0x0) [ 178.141294][ T8738] device hsr_slave_0 entered promiscuous mode [ 178.178623][ T8738] device hsr_slave_1 entered promiscuous mode 13:53:07 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 178.251168][ T8740] device hsr_slave_0 entered promiscuous mode [ 178.298933][ T8740] device hsr_slave_1 entered promiscuous mode [ 178.358743][ T8740] debugfs: Directory 'hsr0' with parent '/' already present! [ 178.375627][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 178.391387][ T8749] IPVS: ftp: loaded support on port[0] = 21 [ 178.452889][ T8751] IPVS: ftp: loaded support on port[0] = 21 [ 178.542947][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.550717][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.558438][ T8744] device bridge_slave_0 entered promiscuous mode [ 178.567815][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.575087][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.582846][ T8744] device bridge_slave_1 entered promiscuous mode [ 178.603559][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 178.632545][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.643769][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.671386][ T8744] team0: Port device team_slave_0 added [ 178.709746][ T8744] team0: Port device team_slave_1 added [ 178.732530][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.739984][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.747610][ T8746] device bridge_slave_0 entered promiscuous mode [ 178.755648][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.762771][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.770555][ T8746] device bridge_slave_1 entered promiscuous mode [ 178.901283][ T8744] device hsr_slave_0 entered promiscuous mode [ 178.938738][ T8744] device hsr_slave_1 entered promiscuous mode [ 178.978677][ T8744] debugfs: Directory 'hsr0' with parent '/' already present! [ 179.013145][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 179.045578][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.056939][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.087887][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 179.111535][ T8746] team0: Port device team_slave_0 added [ 179.120077][ T8746] team0: Port device team_slave_1 added [ 179.143297][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.150537][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.158087][ T8749] device bridge_slave_0 entered promiscuous mode [ 179.165794][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.172943][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.181202][ T8749] device bridge_slave_1 entered promiscuous mode [ 179.221310][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.262133][ T8746] device hsr_slave_0 entered promiscuous mode [ 179.318878][ T8746] device hsr_slave_1 entered promiscuous mode [ 179.358397][ T8746] debugfs: Directory 'hsr0' with parent '/' already present! [ 179.372366][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.379695][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.387294][ T8751] device bridge_slave_0 entered promiscuous mode [ 179.403152][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.411398][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.461220][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.468613][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.476181][ T8751] device bridge_slave_1 entered promiscuous mode [ 179.496897][ T8749] team0: Port device team_slave_0 added [ 179.517899][ T8740] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.545787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.554142][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.563821][ T8749] team0: Port device team_slave_1 added [ 179.573464][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.586619][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.597838][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.613104][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.632876][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.641935][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.651374][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.658578][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.666391][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.675332][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.683715][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.690783][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.698477][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.761355][ T8749] device hsr_slave_0 entered promiscuous mode [ 179.809067][ T8749] device hsr_slave_1 entered promiscuous mode [ 179.848467][ T8749] debugfs: Directory 'hsr0' with parent '/' already present! [ 179.877736][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.887470][ T8751] team0: Port device team_slave_0 added [ 179.894825][ T8751] team0: Port device team_slave_1 added [ 179.902600][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.910974][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.918909][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.927360][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.936107][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.944072][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.955464][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.968315][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.977416][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.986042][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.994614][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.004787][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.043349][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.052116][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.061230][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.068339][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.076109][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.084807][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.093136][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.100232][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.108413][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.126988][ T8740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.140292][ T8740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.181635][ T8751] device hsr_slave_0 entered promiscuous mode [ 180.218683][ T8751] device hsr_slave_1 entered promiscuous mode [ 180.258609][ T8751] debugfs: Directory 'hsr0' with parent '/' already present! [ 180.267131][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.276171][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.284609][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.293247][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.301769][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.310136][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.318764][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.327028][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.334098][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.344048][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.351874][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.382357][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.402330][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.416312][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.426891][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.435674][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.444184][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.452777][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.461378][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.468471][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.488123][ T8744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.499252][ T8744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.549387][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.557120][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.566875][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.576706][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.585554][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.594362][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.603628][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.612142][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.620901][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.630519][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.639119][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.647277][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.656204][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.664587][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.673171][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.681485][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.689661][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.697749][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.705612][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.714609][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.725659][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.741199][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.758465][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.766293][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.775069][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.784702][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.796704][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.803895][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.812020][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.838462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.847063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.856384][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.863473][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.871233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.880076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.888683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.897211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.906227][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.934977][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.952876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.973225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.983007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.990937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.998720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.007042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.020267][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 13:53:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 181.052978][ T8746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.075968][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.091051][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.106033][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.134880][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.154230][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.170488][ C0] hrtimer: interrupt took 28524 ns [ 181.174370][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.184673][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.191780][ T8756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.201319][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.227204][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.239131][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.247966][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.255106][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state 13:53:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 181.274023][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.288876][ T8753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:53:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 181.336538][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.352547][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.361261][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.407195][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.449786][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:53:11 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet(0x2, 0x80a, 0x0) r5 = socket$inet(0x2, 0x80a, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x3}, 0x8) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r7, r3) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) [ 181.503566][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.512300][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.522640][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 13:53:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@fat=@umask={'umask'}}]}) [ 181.564765][ T8795] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 181.579653][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.589621][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 13:53:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 181.613852][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.621107][ T3776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.663396][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.687482][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.700668][ T8805] FAT-fs (loop2): bogus number of reserved sectors [ 181.707401][ T8805] FAT-fs (loop2): Can't find a valid FAT filesystem [ 181.732132][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.739411][ T3776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.747617][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:53:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) [ 181.767278][ T8749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.787252][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.827432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.836880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.847169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.855089][ T8805] FAT-fs (loop2): bogus number of reserved sectors [ 181.855112][ T8805] FAT-fs (loop2): Can't find a valid FAT filesystem [ 181.880651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.893701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.906463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.916053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 13:53:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000001c0)) [ 181.924674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.937440][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.964863][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.974521][ T3776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) waitid$P_PIDFD(0x3, r0, 0x0, 0x4, &(0x7f0000000140)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 182.051101][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.089624][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.113230][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.135866][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.153862][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.170414][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.189049][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.197722][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.213447][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:53:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(r0, 0xc080661a, 0x0) [ 182.301732][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 13:53:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x204e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 13:53:12 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 13:53:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x14, 0x901, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, [@typed={0x14, 0x2, @ipv6=@initdev={0xfe, 0x88, [0x0, 0x0, 0xf0]}}]}]}, 0x2c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 13:53:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xb, 0x2, {0x8}}}}]}, 0x38}}, 0x0) 13:53:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x14, 0x901, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, [@typed={0x14, 0x2, @ipv6=@initdev={0xfe, 0x88, [0x0, 0x0, 0xf0]}}]}]}, 0x2c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) [ 182.869860][ T8861] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.983931][ T8831] ================================================================== [ 182.992209][ T8831] BUG: KASAN: use-after-free in nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.000538][ T8831] Read of size 1 at addr ffff888099560004 by task syz-executor.1/8831 [ 183.008678][ T8831] [ 183.011021][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.1 Not tainted 5.4.0-rc4-next-20191025 #0 [ 183.019950][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.030008][ T8831] Call Trace: [ 183.033309][ T8831] dump_stack+0x172/0x1f0 [ 183.037647][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.043640][ T8831] print_address_description.constprop.0.cold+0xd4/0x30b [ 183.050664][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.056650][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.062651][ T8831] __kasan_report.cold+0x1b/0x41 [ 183.067604][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.073588][ T8831] kasan_report+0x12/0x20 [ 183.077917][ T8831] __asan_report_load1_noabort+0x14/0x20 [ 183.083551][ T8831] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 183.089367][ T8831] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 183.095797][ T8831] nf_confirm+0x3d8/0x4d0 [ 183.100136][ T8831] ipv4_confirm+0x14c/0x240 [ 183.104643][ T8831] nf_hook_slow+0xbc/0x1e0 [ 183.109075][ T8831] ip_output+0x40d/0x670 [ 183.113323][ T8831] ? ip_mc_output+0xf60/0xf60 [ 183.118010][ T8831] ? __ip_finish_output+0xbd0/0xbd0 [ 183.123212][ T8831] ? ip_make_skb+0x1b1/0x2c0 [ 183.127811][ T8831] ? ip_reply_glue_bits+0xc0/0xc0 [ 183.132845][ T8831] ip_local_out+0xbb/0x1b0 [ 183.137270][ T8831] ip_send_skb+0x42/0xf0 [ 183.141521][ T8831] udp_send_skb.isra.0+0x6d5/0x11b0 [ 183.146728][ T8831] ? xfrm_lookup_route+0x5b/0x1e0 [ 183.151763][ T8831] udp_sendmsg+0x1e8f/0x2810 [ 183.156365][ T8831] ? ip_reply_glue_bits+0xc0/0xc0 [ 183.161401][ T8831] ? udp_unicast_rcv_skb.isra.0+0x360/0x360 [ 183.167290][ T8831] ? tomoyo_unix_entry+0x5d0/0x5d0 [ 183.172399][ T8831] ? ___might_sleep+0x163/0x2c0 [ 183.177236][ T8831] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 183.182899][ T8831] ? aa_sk_perm+0x288/0x870 [ 183.187380][ T8831] ? __kasan_check_read+0x11/0x20 [ 183.192396][ T8831] ? mark_lock+0xc2/0x1220 [ 183.196796][ T8831] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 183.202341][ T8831] inet_sendmsg+0x9e/0xe0 [ 183.206667][ T8831] ? inet_sendmsg+0x9e/0xe0 [ 183.211162][ T8831] ? inet_send_prepare+0x4e0/0x4e0 [ 183.216298][ T8831] sock_sendmsg+0xd7/0x130 [ 183.220710][ T8831] kernel_sendmsg+0x44/0x50 [ 183.225207][ T8831] rxrpc_send_abort_packet+0x479/0xe70 [ 183.230664][ T8831] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 183.235948][ T8831] ? rxrpc_send_ack_packet+0x2640/0x2640 [ 183.241572][ T8831] ? find_held_lock+0x35/0x130 [ 183.246371][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 183.251640][ T8831] ? rxrpc_release_calls_on_socket+0x6d3/0x1320 [ 183.257860][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 183.262864][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 183.268400][ T8831] ? __local_bh_enable_ip+0x15a/0x270 [ 183.273860][ T8831] rxrpc_release_calls_on_socket+0x6db/0x1320 [ 183.279937][ T8831] ? rxrpc_discard_prealloc+0x65f/0xf20 [ 183.285483][ T8831] ? rxrpc_release+0x238/0x550 [ 183.290261][ T8831] rxrpc_release+0x2a6/0x550 [ 183.294848][ T8831] __sock_release+0xce/0x280 [ 183.299436][ T8831] sock_close+0x1e/0x30 [ 183.303581][ T8831] __fput+0x2ff/0x890 [ 183.307557][ T8831] ? __sock_release+0x280/0x280 [ 183.312404][ T8831] ____fput+0x16/0x20 [ 183.316378][ T8831] task_work_run+0x145/0x1c0 [ 183.320980][ T8831] get_signal+0x206e/0x24f0 [ 183.325474][ T8831] ? ___sys_recvmsg+0x5c0/0x5c0 [ 183.330316][ T8831] ? retint_kernel+0x2b/0x2b [ 183.334905][ T8831] do_signal+0x87/0x1700 [ 183.339145][ T8831] ? setup_sigcontext+0x7d0/0x7d0 [ 183.344167][ T8831] ? put_timespec64+0xda/0x140 [ 183.348929][ T8831] ? __sys_recvmmsg+0x131/0x270 [ 183.353773][ T8831] ? exit_to_usermode_loop+0x43/0x380 [ 183.359137][ T8831] ? do_syscall_64+0x65f/0x760 [ 183.364063][ T8831] ? exit_to_usermode_loop+0x43/0x380 [ 183.369516][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 183.374791][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 183.379817][ T8831] exit_to_usermode_loop+0x286/0x380 [ 183.385099][ T8831] do_syscall_64+0x65f/0x760 [ 183.389686][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.395566][ T8831] RIP: 0033:0x459ef9 [ 183.399451][ T8831] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 183.419058][ T8831] RSP: 002b:00007f6e7b9f5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.427499][ T8831] RAX: fffffffffffffe00 RBX: 0000000000000005 RCX: 0000000000459ef9 [ 183.435459][ T8831] RDX: 0000000000000001 RSI: 0000000020001f40 RDI: 0000000000000005 [ 183.443426][ T8831] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 183.451465][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e7b9f66d4 [ 183.459427][ T8831] R13: 00000000004c7820 R14: 00000000004dd440 R15: 00000000ffffffff [ 183.467439][ T8831] [ 183.469752][ T8831] Allocated by task 8831: [ 183.474074][ T8831] save_stack+0x23/0x90 [ 183.478272][ T8831] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 183.483898][ T8831] kasan_krealloc+0x84/0xc0 [ 183.488391][ T8831] krealloc+0xa6/0xd0 [ 183.492363][ T8831] nf_ct_ext_add+0x2c7/0x630 [ 183.497015][ T8831] init_conntrack.isra.0+0x5ed/0x11a0 [ 183.502382][ T8831] nf_conntrack_in+0xd94/0x1460 [ 183.507220][ T8831] ipv4_conntrack_local+0x127/0x220 [ 183.512399][ T8831] nf_hook_slow+0xbc/0x1e0 [ 183.516799][ T8831] __ip_local_out+0x403/0x870 [ 183.521463][ T8831] ip_local_out+0x2d/0x1b0 [ 183.525869][ T8831] ip_send_skb+0x42/0xf0 [ 183.530187][ T8831] udp_send_skb.isra.0+0x6d5/0x11b0 [ 183.535381][ T8831] udp_sendmsg+0x1e8f/0x2810 [ 183.539968][ T8831] inet_sendmsg+0x9e/0xe0 [ 183.544284][ T8831] sock_sendmsg+0xd7/0x130 [ 183.548686][ T8831] kernel_sendmsg+0x44/0x50 [ 183.553176][ T8831] rxrpc_send_abort_packet+0x479/0xe70 [ 183.558626][ T8831] rxrpc_release_calls_on_socket+0x6db/0x1320 [ 183.564694][ T8831] rxrpc_release+0x2a6/0x550 [ 183.569359][ T8831] __sock_release+0xce/0x280 [ 183.573955][ T8831] sock_close+0x1e/0x30 [ 183.578117][ T8831] __fput+0x2ff/0x890 [ 183.582096][ T8831] ____fput+0x16/0x20 [ 183.586092][ T8831] task_work_run+0x145/0x1c0 [ 183.590681][ T8831] get_signal+0x206e/0x24f0 [ 183.595176][ T8831] do_signal+0x87/0x1700 [ 183.599411][ T8831] exit_to_usermode_loop+0x286/0x380 [ 183.604795][ T8831] do_syscall_64+0x65f/0x760 [ 183.609378][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.615270][ T8831] [ 183.617578][ T8831] Freed by task 8831: [ 183.621547][ T8831] save_stack+0x23/0x90 [ 183.625692][ T8831] __kasan_slab_free+0x102/0x150 [ 183.630708][ T8831] kasan_slab_free+0xe/0x10 [ 183.635197][ T8831] kfree+0x10a/0x2c0 [ 183.639090][ T8831] nf_ct_ext_destroy+0x2ab/0x2e0 [ 183.644021][ T8831] nf_conntrack_free+0x8f/0xe0 [ 183.648774][ T8831] destroy_conntrack+0x1a2/0x270 [ 183.653700][ T8831] nf_conntrack_destroy+0xed/0x230 [ 183.658799][ T8831] __nf_conntrack_confirm+0x21ca/0x2830 [ 183.664342][ T8831] nf_confirm+0x3e7/0x4d0 [ 183.668679][ T8831] ipv4_confirm+0x14c/0x240 [ 183.673183][ T8831] nf_hook_slow+0xbc/0x1e0 [ 183.677590][ T8831] ip_output+0x40d/0x670 [ 183.681820][ T8831] ip_local_out+0xbb/0x1b0 [ 183.686227][ T8831] ip_send_skb+0x42/0xf0 [ 183.690455][ T8831] udp_send_skb.isra.0+0x6d5/0x11b0 [ 183.695631][ T8831] udp_sendmsg+0x1e8f/0x2810 [ 183.700206][ T8831] inet_sendmsg+0x9e/0xe0 [ 183.704541][ T8831] sock_sendmsg+0xd7/0x130 [ 183.708951][ T8831] kernel_sendmsg+0x44/0x50 [ 183.713451][ T8831] rxrpc_send_abort_packet+0x479/0xe70 [ 183.718899][ T8831] rxrpc_release_calls_on_socket+0x6db/0x1320 [ 183.725909][ T8831] rxrpc_release+0x2a6/0x550 [ 183.730492][ T8831] __sock_release+0xce/0x280 [ 183.735071][ T8831] sock_close+0x1e/0x30 [ 183.739218][ T8831] __fput+0x2ff/0x890 [ 183.743189][ T8831] ____fput+0x16/0x20 [ 183.747147][ T8831] task_work_run+0x145/0x1c0 [ 183.751731][ T8831] get_signal+0x206e/0x24f0 [ 183.756237][ T8831] do_signal+0x87/0x1700 [ 183.760477][ T8831] exit_to_usermode_loop+0x286/0x380 [ 183.765752][ T8831] do_syscall_64+0x65f/0x760 [ 183.770330][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.776208][ T8831] [ 183.778528][ T8831] The buggy address belongs to the object at ffff888099560000 [ 183.778528][ T8831] which belongs to the cache kmalloc-128 of size 128 [ 183.792623][ T8831] The buggy address is located 4 bytes inside of [ 183.792623][ T8831] 128-byte region [ffff888099560000, ffff888099560080) [ 183.805695][ T8831] The buggy address belongs to the page: [ 183.811306][ T8831] page:ffffea0002655800 refcount:1 mapcount:0 mapping:ffff8880aa400700 index:0x0 [ 183.820397][ T8831] flags: 0x1fffc0000000200(slab) [ 183.825327][ T8831] raw: 01fffc0000000200 ffffea00029de8c8 ffffea00027a79c8 ffff8880aa400700 [ 183.834010][ T8831] raw: 0000000000000000 ffff888099560000 0000000100000010 0000000000000000 [ 183.842589][ T8831] page dumped because: kasan: bad access detected [ 183.848991][ T8831] [ 183.851317][ T8831] Memory state around the buggy address: [ 183.856966][ T8831] ffff88809955ff00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 183.865010][ T8831] ffff88809955ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.873059][ T8831] >ffff888099560000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.881108][ T8831] ^ [ 183.885164][ T8831] ffff888099560080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.893205][ T8831] ffff888099560100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 183.901249][ T8831] ================================================================== [ 183.909301][ T8831] Disabling lock debugging due to kernel taint [ 183.975640][ T8831] Kernel panic - not syncing: panic_on_warn set ... [ 183.982808][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.1 Tainted: G B 5.4.0-rc4-next-20191025 #0 [ 183.993122][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.998661][ T3920] kobject: 'loop4' (000000008fdc8cff): kobject_uevent_env [ 184.003168][ T8831] Call Trace: [ 184.013562][ T8831] dump_stack+0x172/0x1f0 [ 184.016033][ T3920] kobject: 'loop4' (000000008fdc8cff): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 184.017902][ T8831] panic+0x2e3/0x75c [ 184.017916][ T8831] ? add_taint.cold+0x16/0x16 [ 184.017930][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 184.017947][ T8831] ? preempt_schedule+0x4b/0x60 [ 184.047493][ T8831] ? ___preempt_schedule+0x16/0x18 [ 184.052614][ T8831] ? trace_hardirqs_on+0x5e/0x240 [ 184.057651][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 184.063626][ T8831] end_report+0x47/0x4f [ 184.067764][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 184.073732][ T8831] __kasan_report.cold+0xe/0x41 [ 184.078565][ T8831] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 184.084522][ T8831] kasan_report+0x12/0x20 [ 184.088843][ T8831] __asan_report_load1_noabort+0x14/0x20 [ 184.094478][ T8831] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 184.100269][ T8831] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 184.106678][ T8831] nf_confirm+0x3d8/0x4d0 [ 184.111006][ T8831] ipv4_confirm+0x14c/0x240 [ 184.115505][ T8831] nf_hook_slow+0xbc/0x1e0 [ 184.119907][ T8831] ip_output+0x40d/0x670 [ 184.124128][ T8831] ? ip_mc_output+0xf60/0xf60 [ 184.128796][ T8831] ? __ip_finish_output+0xbd0/0xbd0 [ 184.133981][ T8831] ? ip_make_skb+0x1b1/0x2c0 [ 184.138683][ T8831] ? ip_reply_glue_bits+0xc0/0xc0 [ 184.143687][ T8831] ip_local_out+0xbb/0x1b0 [ 184.148082][ T8831] ip_send_skb+0x42/0xf0 [ 184.152316][ T8831] udp_send_skb.isra.0+0x6d5/0x11b0 [ 184.157523][ T8831] ? xfrm_lookup_route+0x5b/0x1e0 [ 184.162535][ T8831] udp_sendmsg+0x1e8f/0x2810 [ 184.167107][ T8831] ? ip_reply_glue_bits+0xc0/0xc0 [ 184.172118][ T8831] ? udp_unicast_rcv_skb.isra.0+0x360/0x360 [ 184.177991][ T8831] ? tomoyo_unix_entry+0x5d0/0x5d0 [ 184.183090][ T8831] ? ___might_sleep+0x163/0x2c0 [ 184.187919][ T8831] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 184.193533][ T8831] ? aa_sk_perm+0x288/0x870 [ 184.198015][ T8831] ? __kasan_check_read+0x11/0x20 [ 184.204017][ T8831] ? mark_lock+0xc2/0x1220 [ 184.208425][ T8831] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 184.213961][ T8831] inet_sendmsg+0x9e/0xe0 [ 184.218272][ T8831] ? inet_sendmsg+0x9e/0xe0 [ 184.222753][ T8831] ? inet_send_prepare+0x4e0/0x4e0 [ 184.227842][ T8831] sock_sendmsg+0xd7/0x130 [ 184.232247][ T8831] kernel_sendmsg+0x44/0x50 [ 184.236737][ T8831] rxrpc_send_abort_packet+0x479/0xe70 [ 184.242182][ T8831] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 184.247446][ T8831] ? rxrpc_send_ack_packet+0x2640/0x2640 [ 184.253053][ T8831] ? find_held_lock+0x35/0x130 [ 184.257884][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 184.263152][ T8831] ? rxrpc_release_calls_on_socket+0x6d3/0x1320 [ 184.269379][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 184.274393][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 184.279920][ T8831] ? __local_bh_enable_ip+0x15a/0x270 [ 184.285271][ T8831] rxrpc_release_calls_on_socket+0x6db/0x1320 [ 184.291332][ T8831] ? rxrpc_discard_prealloc+0x65f/0xf20 [ 184.296905][ T8831] ? rxrpc_release+0x238/0x550 [ 184.301647][ T8831] rxrpc_release+0x2a6/0x550 [ 184.306219][ T8831] __sock_release+0xce/0x280 [ 184.310797][ T8831] sock_close+0x1e/0x30 [ 184.314951][ T8831] __fput+0x2ff/0x890 [ 184.318925][ T8831] ? __sock_release+0x280/0x280 [ 184.323753][ T8831] ____fput+0x16/0x20 [ 184.327711][ T8831] task_work_run+0x145/0x1c0 [ 184.332282][ T8831] get_signal+0x206e/0x24f0 [ 184.336764][ T8831] ? ___sys_recvmsg+0x5c0/0x5c0 [ 184.341603][ T8831] ? retint_kernel+0x2b/0x2b [ 184.346200][ T8831] do_signal+0x87/0x1700 [ 184.350440][ T8831] ? setup_sigcontext+0x7d0/0x7d0 [ 184.355453][ T8831] ? put_timespec64+0xda/0x140 [ 184.360254][ T8831] ? __sys_recvmmsg+0x131/0x270 [ 184.365093][ T8831] ? exit_to_usermode_loop+0x43/0x380 [ 184.370453][ T8831] ? do_syscall_64+0x65f/0x760 [ 184.375202][ T8831] ? exit_to_usermode_loop+0x43/0x380 [ 184.380552][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 184.385814][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 184.390829][ T8831] exit_to_usermode_loop+0x286/0x380 [ 184.396103][ T8831] do_syscall_64+0x65f/0x760 [ 184.400687][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.406561][ T8831] RIP: 0033:0x459ef9 [ 184.410456][ T8831] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.430057][ T8831] RSP: 002b:00007f6e7b9f5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 184.438467][ T8831] RAX: fffffffffffffe00 RBX: 0000000000000005 RCX: 0000000000459ef9 [ 184.446420][ T8831] RDX: 0000000000000001 RSI: 0000000020001f40 RDI: 0000000000000005 [ 184.454420][ T8831] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 184.462381][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e7b9f66d4 [ 184.470344][ T8831] R13: 00000000004c7820 R14: 00000000004dd440 R15: 00000000ffffffff [ 184.479615][ T8831] Kernel Offset: disabled [ 184.483961][ T8831] Rebooting in 86400 seconds..