[ 60.416054] audit: type=1800 audit(1539233480.453:27): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 61.956002] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 63.194477] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 63.766530] random: sshd: uninitialized urandom read (32 bytes read) [ 66.348978] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. [ 72.120537] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 04:51:34 fuzzer started [ 76.839803] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 04:51:39 dialing manager at 10.128.0.26:39089 2018/10/11 04:51:39 syscalls: 1 2018/10/11 04:51:39 code coverage: enabled 2018/10/11 04:51:39 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 04:51:39 setuid sandbox: enabled 2018/10/11 04:51:39 namespace sandbox: enabled 2018/10/11 04:51:39 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 04:51:39 fault injection: enabled 2018/10/11 04:51:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 04:51:39 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 04:51:39 net device setup: enabled [ 82.038013] random: crng init done 04:53:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3ff, 0x0, 0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 206.986145] IPVS: ftp: loaded support on port[0] = 21 [ 208.521058] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.527714] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.536641] device bridge_slave_0 entered promiscuous mode [ 208.704057] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.710549] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.719510] device bridge_slave_1 entered promiscuous mode [ 208.870858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.018875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.478682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.630673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.780161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.787498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.937321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.944500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:53:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000000000000000000200000000000000000000000ffffffff0000000000000000000000000012c301a8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001900000009000000000000000000106cf4aa4ac99e8d000000006c6f00000000000000000000000000010000000000000000000000001000000000000100895fc5d400000012a85f001a4b0000000000000005000000aaaaaaaaaa000003cae1dd0000007000000070000000a0000000415544495400000006000000000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0x1a8) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 210.468193] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.476670] team0: Port device team_slave_0 added [ 210.645414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.653687] team0: Port device team_slave_1 added [ 210.929614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.936812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.946140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.174339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.181375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.190493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.315278] IPVS: ftp: loaded support on port[0] = 21 [ 211.506713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.514608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.524074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.681140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.688981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.698377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.569769] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.576377] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.585148] device bridge_slave_0 entered promiscuous mode [ 213.831582] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.838254] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.847133] device bridge_slave_1 entered promiscuous mode [ 214.080269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.090579] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.097131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.104180] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.110685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.120048] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.270373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.884334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.030076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.259491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.572102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.579362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.785259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.792332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:53:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@remote}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @register_looper], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xffffffffffffff43, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 216.651885] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.660279] team0: Port device team_slave_0 added [ 216.991154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.999763] team0: Port device team_slave_1 added [ 217.324201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.331333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.340579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.478241] IPVS: ftp: loaded support on port[0] = 21 [ 217.599293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.606543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.615763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.878492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.886402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.895646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.224561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.232203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.241505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.469712] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.476310] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.484961] device bridge_slave_0 entered promiscuous mode [ 220.801576] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.808179] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.816872] device bridge_slave_1 entered promiscuous mode [ 221.116978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.489415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.511707] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.518261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.525365] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.531843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.541147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.057872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.440371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.793722] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.030600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.038917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.359039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.366313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.198937] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.207434] team0: Port device team_slave_0 added [ 224.577695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.586243] team0: Port device team_slave_1 added 04:54:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000880)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) [ 224.971515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.978770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.987521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.390379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.397621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.406662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.752154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.760031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.769775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.114208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.121905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.131452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.319861] IPVS: ftp: loaded support on port[0] = 21 [ 226.595349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.016383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.401714] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.408387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.416776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.604133] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.610620] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.619365] device bridge_slave_0 entered promiscuous mode [ 230.040541] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.047221] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.056006] device bridge_slave_1 entered promiscuous mode [ 230.447005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.635452] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.641964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.649070] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.655635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.664684] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.836804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.852263] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.924421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.931360] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.251044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.649580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.656885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.018887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.026074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.216521] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.224921] team0: Port device team_slave_0 added [ 234.606585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.615128] team0: Port device team_slave_1 added [ 234.960993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.968318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.977456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.335436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.342492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.351723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.771289] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.779138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.788520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 04:54:16 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)="2f02726f75702e7374617000", 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0xb07a891d) gettid() perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x5af250cb, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0xc4, 0x4, 0xffffffff, 0x0, 0xbf, 0x0, 0x3f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x100000001, 0x1f, 0x43e37faa, 0x0, 0xf05, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0xde, 0xfffffffffffffffb, 0x7f, 0x2800, 0x0, 0x3b8, 0x4, @perf_config_ext={0x5}, 0x4, 0x0, 0x683b03d3, 0x2, 0x5}, r1, 0x4, 0xffffffffffffff9c, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40087602, 0x20000001) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 236.212760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.220583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.229666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.255687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.910253] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.031224] IPVS: ftp: loaded support on port[0] = 21 [ 239.800136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.807118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.815462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.648348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:54:21 executing program 0: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0)='trustedmd5sum\x00', 0xfffffffffffffffe) [ 241.190806] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.197388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.204505] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.211007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.219958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 04:54:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x10000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/49) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000070000001000000000000000000000000700009a0ef0939d"], 0x20}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000280)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) r4 = getgid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000380)=[0xee01, 0xffffffffffffffff]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r8 = getgid() fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setgroups(0x9, &(0x7f0000000540)=[r2, r3, r4, r5, r6, r7, r8, r9, r10]) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) [ 241.465692] 8021q: adding VLAN 0 to HW filter on device team0 04:54:21 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x1, 0x100132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="a9befc3056df14ed436897cfd7000be8", 0x10) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xb37b, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[{0x8, 0x3}, {0x2, 0x3800000000}, {0x2, 0x6}, {0x3, 0x200}, {0x6, 0x4}, {0x6, 0xffff}, {0x4, 0x2}], 0x7) getsockopt$inet6_int(r1, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0xfffffffffffffd2d) [ 241.966892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.410998] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.417668] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.426407] device bridge_slave_0 entered promiscuous mode 04:54:22 executing program 0: r0 = socket$inet(0x2, 0x5, 0x10000200000001) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{}, {0x0, @remote}, 0x0, {}, 'lo\x00'}) [ 242.979338] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.986252] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.995007] device bridge_slave_1 entered promiscuous mode 04:54:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x100000000000406, r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$inet(0x2, 0x0, 0x2000000000006) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x5a26, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x100000001, 0x0, 0x100000001, 0xfdfdffff}) [ 243.469777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 243.832719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 04:54:24 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x4000, 0x0) ioctl$void(r0, 0xc0045878) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) r2 = getegid() write$FUSE_ATTR(r0, &(0x7f0000000400)={0x78, 0xfffffffffffffffe, 0x6, {0x0, 0x6, 0x0, {0x5, 0x7, 0x40, 0x8000, 0x1, 0x4, 0x6, 0x7, 0xffffffffffffff7f, 0xffffffffffffbff8, 0x9, r1, r2, 0xade5, 0x40}}}, 0x78) io_setup(0x1f, &(0x7f0000000080)=0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r4, &(0x7f00000000c0)=""/41}) io_submit(r3, 0x368, &(0x7f0000000780)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xc6, r0, &(0x7f00000005c0)="c693551ec4aac6cc1203e5e5b3f2c68ccd2e8ac7df7962df061c23274b7450d5da9b5dd4ccc54d7d88b1a439608a4b08b646f8f5f461ca581de4d06819e8cb880d80596d2059d6717c4bcfbd0aa98e97a469e6fb5295894c987b94b34f921d7ebad8a137ea74cc4438ae7c2d56d1f7261fb1864a75b104a7154e1da33c5aa63c0386caa0cd65cfcc80618edd2cb8b4809439a1b336ca527e", 0x0, 0x4, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, &(0x7f00000006c0)="1863410dbfbcd1d9bcd183ac3afdc1f9cff71c4c251c56b3c709cdc048baac067c4d34c76e76c7c48ab3a39fb185c49ad357476c65d7d505afa3162bd056e0aaf556a55ffbff358a37204406b367f12de08327e8d1f2d538308ca2d0c5f5a70d054c73890cb936076b739eea8272c4ff", 0x0, 0x2, 0x0, 0x1, r0}]) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xad8b) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000140)) 04:54:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6}, &(0x7f0000000100)=0x90) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x8, 0x24000, 0x1, 0x277, 0x0, 0x2}) 04:54:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c2de7081e6d6b64653d30303030303030303030303030303030303034303030302c65a12a413f5f9dd1", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002000), 0x126a) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) fstatfs(r1, &(0x7f00000000c0)=""/52) [ 245.324619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.805004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.150728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.158045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.544938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 246.552233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.120443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.734546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.742854] team0: Port device team_slave_0 added [ 248.199205] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.207811] team0: Port device team_slave_1 added [ 248.520014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.527424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.536366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.656977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.935481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.942596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.951572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.331448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.340363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.349534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.704086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.712291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.721468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.010691] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.019441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.027631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.278437] 8021q: adding VLAN 0 to HW filter on device team0 04:54:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000000100), 0xd14b, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 252.630321] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.636966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.644099] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.650656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.659257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.666565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.133265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.912572] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.728266] binder: 7312:7314 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 256.735669] binder: 7312:7314 ERROR: BC_REGISTER_LOOPER called without request [ 256.775028] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.781399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.789494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:54:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@remote}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)=[@request_death, @register_looper], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xffffffffffffff43, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 256.992216] binder: 7319:7320 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 256.999442] binder: 7319:7320 ERROR: BC_REGISTER_LOOPER called without request [ 257.539240] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.565912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.079325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 04:54:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000880)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) [ 261.609556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.615955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.623720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.920583] 8021q: adding VLAN 0 to HW filter on device team0 04:54:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000c00)=[{}, {0x4, 0xffffffffffff20c6}], 0x2) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'team_slave_1\x00'}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e21, 0x0, @remote, 0x401}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x90}}, 0xe8) sendto$inet6(r1, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}, 0x4}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000012c0)={0x0, @in6, 0x7125, 0x100000000}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r4, 0xfff, 0x401}, &(0x7f0000000000)=0xa) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0xbb80}, &(0x7f0000000800)=0x8) socket(0x1, 0x800, 0x3f) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0xba, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000bc0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000740)={{0x0, @broadcast, 0x0, 0x0, 'none\x00'}, {@remote}}, 0x44) sendto$inet(r3, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) connect$unix(r1, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=0x1) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 04:54:44 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7fff) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write(r1, &(0x7f0000000040)='#', 0x1) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0x0, 0x0, "1c538e5c0b65896475da7e33e137406779dc812a1f7fe907b0af2baeaa21d04c5502a7c458795f06053aa2f465920798b8bd66770f8cec1b8ee1c438c95b6e", 0x37}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x0, 0x0) 04:54:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cf"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x16e, 0x29, &(0x7f0000000700)="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", &(0x7f0000000000)=""/41, 0x100}, 0x28) 04:54:44 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x420000, 0x4) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x20}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x2}, 0xc) fcntl$addseals(r0, 0x409, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000001c0)=0x9, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r1, 0x20}, &(0x7f00000002c0)=0x8) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000300)={0x0, 0xfffffffffffffffa, 0x3, 0x1, 0x9, 0x7, 0x5}) fdatasync(r3) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @local}, &(0x7f0000000380)=0xc) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x41b, 0x2, 0xfff, 0x3}, {0x800, 0x61, 0x2, 0x8}, {0x800, 0x81, 0x20, 0x3ff}, {0x0, 0x0, 0x9, 0x2}, {0x80000001, 0x4, 0x5, 0x7f}, {0x1, 0x5, 0xdd1, 0x5}]}, 0x10) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) r6 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x10001, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x7, 0x881) signalfd(r7, &(0x7f00000004c0)={0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r4, 0x4}, &(0x7f0000000540)=0x8) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000580)={0x4}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000600)={r4, 0x8, 0xff, 0x7dfb, 0x0, 0x40, 0x3, 0x0, {r4, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x5, 0x1, 0x1f9592af, 0x5}}, &(0x7f00000006c0)=0xb0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000700)=0x401, 0x4) sendmsg$xdp(r2, &(0x7f0000000c80)={&(0x7f0000000740)={0x2c, 0x4, r5, 0x3b}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000780)="c2dbbf2bf3955fbae58c36499e658fa2230a17c5f3b0b7564a85accb4a94952f9438c9d218afb2d8e6471cfb1e7b1bb10068936d17c9897a01dfadd209ad00eefc6be285d2138c780986ff395c", 0x4d}, {&(0x7f0000000800)="d639a318d44055d19059eb1745a6f09f6a827a47775aa7", 0x17}, {&(0x7f0000000840)="921004f4e200a4191252c961e7edad2caec514848afdb8ad8d7b84a7bafda6ca2f9c20ae7a29bf626742a80982a58b241827468674f5ee007893d7a31ee7e53396d2c55e59bb1c1f52a79759ae55b8e8e5453b77a755ee24963a4774f5984567d0a089da1e17d903effb19395225f043ff81281132", 0x75}, {&(0x7f00000008c0)="da50f87b39665e0bcea964cb0be2bc48bca8e1", 0x13}, {&(0x7f0000000900)="7af97d77a957937d678e2c09cb559ab7dcd8dcfd0986bffe4d1b68945627bafda54a0629322085fb8d8a839ebe431d0b22b871f01d18624a59904369525d62da8ce70a3e7f2a5e6a0286e334d9a8122c90e5f788c2d12f7562d6d52ee54563530d7e8e379c8f31de0281e39effb28f288055659015d9a5e607faa6a97e39f425fbf772711400136f37f3cc7b04555f8a3efa1c53860da958ab241f1210", 0x9d}, {&(0x7f00000009c0)="f2cdec4f4723bc1bf4acb613c48c6f4c25c086961097b8e1925977c12a614b586c3a40d5692543c89317f48755c74d19623b4a05a88c8b08db5921943cc5c54ef59162bd68a4152f5e37259bd37faadab45ca18593bc7aee4222bd118d185a1ddb68650656af2657779633d73dfb9d49155e76", 0x73}, {&(0x7f0000000a40)="47a15c7575cd1453a74ce507c1566d203ba6450f1f8dfc9d24ed9612dd6415af043d1b4d9c00aff47d2fc796372763717c809d66d2f2c5a44256c2c0f6234941762985844057bb95555d0d606af38b541ff1512101c8c445ff48df43c82c9c2b3254e81946d74fb608daae2d21af25aa09391fd0cdbe583011da6c17f290ed2fb113d7cb61e4448dcf606aeccc260186fca5c48da9f2269ddc5af9f206480a8b3b925598c58a531a5d00", 0xaa}, {&(0x7f0000000b00)="cb3c003622630da1ee1cd2905aceff4b45c94b26e7e1a56abde83db5fb4610005e8a328a44b669d4a53bf6c26c18242e836be3cdd591c679cea5562436ffcc83e70c08b268efbab594b5abff4051713a2b65b06b4376ca3ecb30ec515532fba4b231680035c5f2afbd4109ebecb4b6a84a308c3815aa340a38c64fc3153096940675480bcc50f59d957be95bdb3b96409cf26f5439c85a0fb3b4a142bc504037a07bdcbfdeb7b18e0bad564c3135ea5e73794a536c0db9b558ef7f42a492e66dfa4c2227bfde6cb8051b6dc22b92201e3ec787f462ca6239", 0xd8}], 0x8, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000cc0)={"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"}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000010c0)={0x800, 0x6000000000000, 0x8, 0x10000000000}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001140)={&(0x7f0000001100)='./file0\x00', r0}, 0x10) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000001180)=@generic={0x1, 0x401, 0x8}) renameat2(r3, &(0x7f00000011c0)='./file0\x00', r3, &(0x7f0000001200)='./file0\x00', 0x4) 04:54:44 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0x3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r1, 0x0) 04:54:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000880)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) 04:54:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) move_pages(0x0, 0x4, &(0x7f00000001c0)=[&(0x7f0000eb3000/0x3000)=nil, &(0x7f0000df2000/0x2000)=nil, &(0x7f0000f9a000/0x5000)=nil, &(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004fc0), 0x0, 0x1009}}, 0x20) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0x3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r1, 0x0) 04:54:44 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x5}, 0xe2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x400}, 0x28, 0x0) 04:54:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000880)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) [ 265.403990] hrtimer: interrupt took 235308 ns 04:54:45 executing program 4: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={"ffffff"}, &(0x7f0000000140), 0x213, 0xfffffffffffffffb) 04:54:47 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0x3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r1, 0x0) 04:54:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf542b025", 0x24) 04:54:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffe14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180), 0x14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = dup(r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0), &(0x7f0000000400)=0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) 04:54:47 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0xff27) shutdown(0xffffffffffffffff, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000003c00)=""/4096, 0x200000, 0x0) [ 268.062940] IPVS: ftp: loaded support on port[0] = 21 [ 268.402492] sctp: failed to load transform for md5: -2 [ 268.435315] sctp: failed to load transform for md5: -2 04:54:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) [ 270.437552] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.444181] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.452860] device bridge_slave_0 entered promiscuous mode [ 270.602507] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.609095] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.617840] device bridge_slave_1 entered promiscuous mode [ 270.723313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 270.802911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 271.037870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 271.120166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 271.499530] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 271.507323] team0: Port device team_slave_0 added [ 271.585229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 271.592900] team0: Port device team_slave_1 added [ 271.671318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.750617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 271.757734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.767406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.847804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.855188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.864128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.945614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.953018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.962178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.872522] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.879031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.886114] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.892534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.900792] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.907504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.147075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.456630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.759513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.765960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.774130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.070834] 8021q: adding VLAN 0 to HW filter on device team0 04:54:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001d00)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/120, 0x78}}], 0x1, 0x0, 0x0) 04:54:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000000c0), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x3a0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0x10166) r2 = accept4(r0, 0x0, &(0x7f0000000340), 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 04:54:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:54:59 executing program 0: 04:54:59 executing program 3: 04:54:59 executing program 2: 04:54:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, "00000400000000000000000000000200"}, 0x2c) 04:54:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x1800000000000000, 0x16e, 0x29, &(0x7f0000000700)="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", &(0x7f0000000000)=""/41, 0x100}, 0x28) [ 279.229470] sctp: failed to load transform for md5: -2 04:54:59 executing program 3: 04:54:59 executing program 1: [ 279.505326] IPVS: Scheduler module ip_vs_ not found 04:54:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:54:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:55:00 executing program 5: 04:55:00 executing program 3: 04:55:00 executing program 2: 04:55:00 executing program 1: 04:55:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:55:00 executing program 0: 04:55:00 executing program 1: 04:55:00 executing program 0: 04:55:00 executing program 3: 04:55:00 executing program 2: 04:55:00 executing program 5: 04:55:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:55:01 executing program 1: 04:55:01 executing program 0: 04:55:01 executing program 5: 04:55:01 executing program 3: 04:55:01 executing program 1: 04:55:01 executing program 2: 04:55:01 executing program 0: 04:55:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000010ff0), 0x10) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) 04:55:01 executing program 5: 04:55:01 executing program 1: 04:55:01 executing program 3: 04:55:02 executing program 2: 04:55:02 executing program 0: 04:55:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 04:55:02 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) 04:55:02 executing program 3: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf70aece2edba2b2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x3, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x22, 0x3ff, 0x7f, 0x3ff, 0x81, &(0x7f0000000380)='lo\x00', 0x3, 0x2, 0x9}) clock_gettime(0x5, &(0x7f0000000b80)) socket$inet(0x2, 0x5, 0x5c2d) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(r1, &(0x7f0000000ac0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000500)=0xfffffffffffffc01, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000700)="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", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) setrlimit(0x7, &(0x7f0000000540)={0x1, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x4, 0xfffffffffffffc01, 0x5, 0xf832}, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xfffffffffffffffe, 0x10008, 0x2) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000005c0)=""/148, &(0x7f00000001c0)=0x94) r3 = creat(&(0x7f0000000580)='./bus/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x2}}, [0x4, 0x4, 0x0, 0x6, 0x5, 0x0, 0x84d9, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7, 0x400, 0x6]}, &(0x7f0000000200)=0x100) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000009c0)={0x56, 0x1, 0x7ff, {0x7f, 0x2}, {0x3ff, 0x100000000}, @period={0x5a, 0x83, 0x100000000, 0x6, 0x1, {0xd1a, 0x703, 0x3, 0x8000000000000}, 0x6, &(0x7f0000000680)=[0x5, 0x30e, 0x9, 0x1ff, 0x3, 0xfffffffffffffbff]}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000002c0)="a1") 04:55:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) 04:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0xfffffffc}, [@NDA_DST_MAC={0xc, 0x1, @link_local}]}, 0x28}}, 0x0) 04:55:02 executing program 0: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000140), 0x213, 0xfffffffffffffffb) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) 04:55:02 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}], 0x1, 0x0, &(0x7f0000001600)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:55:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="585ccb83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2572829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c0100000000000000c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725392a368f4d95b827e096900ba47ae05e3c223b24497ff15cf7bb7353a436ef3e363e802a5a7c369080cabc1749d7b7f767c0c4a338b158950de66b00f483ee35019834076ead7ea98e1c34feb5e8bf15ae12bea2f0bbc86db005eb0f140b1e39b9cddc8323b25388868232478d80c4345e67f75f7bdfd964c07da08ec367fea3b8cf4c0d82ac3b5d42db8fb3972fda14d98324695731727fbf9a64f549fb4d4b8169d9417d33a214fb02cb5d029009ea68b724b6ca6e60e3a0a267d9876e2e98419823f6602f40a60f5c9caf688b8a1a21d98d3f96767954e58f11449aff4dd442d5888bcff5b6864ad4cbba4b59107d00000cf95789a4d96b3f468e6e1bb7773f87aeb3c0746412bbfb4181", 0x1c9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 04:55:02 executing program 3: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf70aece2edba2b2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x3, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x22, 0x3ff, 0x7f, 0x3ff, 0x81, &(0x7f0000000380)='lo\x00', 0x3, 0x2, 0x9}) clock_gettime(0x5, &(0x7f0000000b80)) socket$inet(0x2, 0x5, 0x5c2d) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(r1, &(0x7f0000000ac0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000500)=0xfffffffffffffc01, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000700)="0000000000007225f78380807dde5053601841a0d0f82b74374852b01f125997622dc4a5e71d2ce5ac32ff90824fa25e59073487cf36ad576e32926b04894da740f7e9c0ffb42c356a1f285bfc8f0b8c6f72ef151dab4c5c2a5a751f04bfc69ac5c3b5168a6d13d826b1ed0c7527d58f54adc12fca1f25c8fc2586ea4d90f84dabcdec291fb780a39a117d12b0893b182098dceed33b222a1d413709ae355d4d297fe42c5d4e9d8bbd9d0c709cae47e88f8aa22a505b3e995b501f0d3753cd3510e87436612b401305f316177f6d4d4c70fd9d2621c3707ad88da7852596d89a59cb74505e675ac6ebc03faa3ee99889176b571135031afc973c52c5f6437b8143002b30d8fb92011c4994cc024e40497b2daeb06ad5308af486d0178a418f6bdb6940f07dc6e5cf1a3c852b401e3ecec45d22fd687928411b83f68bf7be4b21fdf0033cf949b8a76aa65d68ad885967c2cc3c2d60ec74fcf5de162c94ffe3e15775c1a1cfd9818d4c17a2f8d0a7302538f079e7b128ef123c8bb909000000000000003814c2aea86c35fbf4244a64635d32ff12e4dcb3df56e5d5d3882a9984993f8a7fef72d875d21c1e3bb2bc3e6e79a2b6d322f710f0378abc2095d32139e39f3223db9961309295e4c3c8e1b0001dd757aa000000000000000000000000000008eca80c7b0c", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) setrlimit(0x7, &(0x7f0000000540)={0x1, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x4, 0xfffffffffffffc01, 0x5, 0xf832}, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xfffffffffffffffe, 0x10008, 0x2) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000005c0)=""/148, &(0x7f00000001c0)=0x94) r3 = creat(&(0x7f0000000580)='./bus/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x2}}, [0x4, 0x4, 0x0, 0x6, 0x5, 0x0, 0x84d9, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7, 0x400, 0x6]}, &(0x7f0000000200)=0x100) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000009c0)={0x56, 0x1, 0x7ff, {0x7f, 0x2}, {0x3ff, 0x100000000}, @period={0x5a, 0x83, 0x100000000, 0x6, 0x1, {0xd1a, 0x703, 0x3, 0x8000000000000}, 0x6, &(0x7f0000000680)=[0x5, 0x30e, 0x9, 0x1ff, 0x3, 0xfffffffffffffbff]}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000002c0)="a1") 04:55:03 executing program 3: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf70aece2edba2b2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x3, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x22, 0x3ff, 0x7f, 0x3ff, 0x81, &(0x7f0000000380)='lo\x00', 0x3, 0x2, 0x9}) clock_gettime(0x5, &(0x7f0000000b80)) socket$inet(0x2, 0x5, 0x5c2d) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(r1, &(0x7f0000000ac0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000500)=0xfffffffffffffc01, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000700)="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", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) setrlimit(0x7, &(0x7f0000000540)={0x1, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x4, 0xfffffffffffffc01, 0x5, 0xf832}, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xfffffffffffffffe, 0x10008, 0x2) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000005c0)=""/148, &(0x7f00000001c0)=0x94) r3 = creat(&(0x7f0000000580)='./bus/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x2}}, [0x4, 0x4, 0x0, 0x6, 0x5, 0x0, 0x84d9, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7, 0x400, 0x6]}, &(0x7f0000000200)=0x100) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000009c0)={0x56, 0x1, 0x7ff, {0x7f, 0x2}, {0x3ff, 0x100000000}, @period={0x5a, 0x83, 0x100000000, 0x6, 0x1, {0xd1a, 0x703, 0x3, 0x8000000000000}, 0x6, &(0x7f0000000680)=[0x5, 0x30e, 0x9, 0x1ff, 0x3, 0xfffffffffffffbff]}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000002c0)="a1") 04:55:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x80001) write$nbd(0xffffffffffffffff, &(0x7f0000000400)={0x67446698, 0x1, 0x0, 0x4, 0x2, "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"}, 0x2d0) r2 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000003c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:55:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000010ff0), 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000e00)=""/25, 0x19}}], 0x1, 0x40000000, &(0x7f0000001600)={r4, r5+10000000}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 04:55:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1, &(0x7f0000000580)=""/251, 0xfb}}, {{&(0x7f0000000e40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=""/47, 0x2f}}], 0x2, 0x0, &(0x7f0000001600)={0x0, r3+10000000}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) [ 283.458831] ================================================================== [ 283.466293] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 283.473949] CPU: 1 PID: 7986 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #66 [ 283.481161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.490537] Call Trace: [ 283.493157] dump_stack+0x306/0x460 [ 283.496822] ? vmx_set_constant_host_state+0x1778/0x1830 [ 283.502336] kmsan_report+0x1a2/0x2e0 [ 283.506188] __msan_warning+0x7c/0xe0 [ 283.510044] vmx_set_constant_host_state+0x1778/0x1830 [ 283.515365] vmx_create_vcpu+0x3e6f/0x7870 [ 283.519639] ? kmsan_set_origin_inline+0x6b/0x120 [ 283.524517] ? __msan_poison_alloca+0x17a/0x210 [ 283.529237] ? vmx_vm_init+0x340/0x340 [ 283.533164] kvm_arch_vcpu_create+0x25d/0x2f0 [ 283.537703] kvm_vm_ioctl+0x13fd/0x33d0 [ 283.541741] ? __msan_poison_alloca+0x17a/0x210 [ 283.546456] ? do_vfs_ioctl+0x18a/0x2810 [ 283.550578] ? __se_sys_ioctl+0x1da/0x270 [ 283.554756] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 283.559636] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 283.564523] do_vfs_ioctl+0xcf3/0x2810 [ 283.568470] ? security_file_ioctl+0x92/0x200 [ 283.573011] __se_sys_ioctl+0x1da/0x270 [ 283.577023] __x64_sys_ioctl+0x4a/0x70 [ 283.580942] do_syscall_64+0xbe/0x100 [ 283.584789] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 283.590013] RIP: 0033:0x457519 04:55:03 executing program 3: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf70aece2edba2b2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x3, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x22, 0x3ff, 0x7f, 0x3ff, 0x81, &(0x7f0000000380)='lo\x00', 0x3, 0x2, 0x9}) clock_gettime(0x5, &(0x7f0000000b80)) socket$inet(0x2, 0x5, 0x5c2d) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(r1, &(0x7f0000000ac0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000500)=0xfffffffffffffc01, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000700)="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", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) setrlimit(0x7, &(0x7f0000000540)={0x1, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x4, 0xfffffffffffffc01, 0x5, 0xf832}, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xfffffffffffffffe, 0x10008, 0x2) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000005c0)=""/148, &(0x7f00000001c0)=0x94) r3 = creat(&(0x7f0000000580)='./bus/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x2}}, [0x4, 0x4, 0x0, 0x6, 0x5, 0x0, 0x84d9, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7, 0x400, 0x6]}, &(0x7f0000000200)=0x100) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000009c0)={0x56, 0x1, 0x7ff, {0x7f, 0x2}, {0x3ff, 0x100000000}, @period={0x5a, 0x83, 0x100000000, 0x6, 0x1, {0xd1a, 0x703, 0x3, 0x8000000000000}, 0x6, &(0x7f0000000680)=[0x5, 0x30e, 0x9, 0x1ff, 0x3, 0xfffffffffffffbff]}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000002c0)="a1") [ 283.593239] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.612166] RSP: 002b:00007f1c8f84fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.619932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 283.627225] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 283.634525] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 283.641825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c8f8506d4 [ 283.649148] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 283.656464] [ 283.658108] Local variable description: ----dt@vmx_set_constant_host_state [ 283.665137] Variable was created at: [ 283.668909] vmx_set_constant_host_state+0x2b0/0x1830 [ 283.674128] vmx_create_vcpu+0x3e6f/0x7870 [ 283.678375] ================================================================== [ 283.685753] Disabling lock debugging due to kernel taint [ 283.691221] Kernel panic - not syncing: panic_on_warn set ... [ 283.691221] [ 283.698626] CPU: 1 PID: 7986 Comm: syz-executor5 Tainted: G B 4.19.0-rc4+ #66 [ 283.707223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.716598] Call Trace: [ 283.719224] dump_stack+0x306/0x460 [ 283.722925] panic+0x54c/0xafa [ 283.726207] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 283.731746] kmsan_report+0x2d3/0x2e0 [ 283.735605] __msan_warning+0x7c/0xe0 [ 283.739475] vmx_set_constant_host_state+0x1778/0x1830 [ 283.744909] vmx_create_vcpu+0x3e6f/0x7870 [ 283.749195] ? kmsan_set_origin_inline+0x6b/0x120 [ 283.754084] ? __msan_poison_alloca+0x17a/0x210 [ 283.758811] ? vmx_vm_init+0x340/0x340 [ 283.762825] kvm_arch_vcpu_create+0x25d/0x2f0 [ 283.767380] kvm_vm_ioctl+0x13fd/0x33d0 [ 283.771418] ? __msan_poison_alloca+0x17a/0x210 [ 283.776132] ? do_vfs_ioctl+0x18a/0x2810 [ 283.780224] ? __se_sys_ioctl+0x1da/0x270 [ 283.784419] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 283.789298] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 283.794185] do_vfs_ioctl+0xcf3/0x2810 [ 283.798134] ? security_file_ioctl+0x92/0x200 [ 283.802876] __se_sys_ioctl+0x1da/0x270 04:55:03 executing program 3: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf70aece2edba2b2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x3, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x22, 0x3ff, 0x7f, 0x3ff, 0x81, &(0x7f0000000380)='lo\x00', 0x3, 0x2, 0x9}) clock_gettime(0x5, &(0x7f0000000b80)) socket$inet(0x2, 0x5, 0x5c2d) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$vsock_stream(r1, &(0x7f0000000ac0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000500)=0xfffffffffffffc01, 0x3, 0x2) r2 = memfd_create(&(0x7f0000000700)="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", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) setrlimit(0x7, &(0x7f0000000540)={0x1, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x4, 0xfffffffffffffc01, 0x5, 0xf832}, 0x8) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xfffffffffffffffe, 0x10008, 0x2) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000005c0)=""/148, &(0x7f00000001c0)=0x94) r3 = creat(&(0x7f0000000580)='./bus/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x2}}, [0x4, 0x4, 0x0, 0x6, 0x5, 0x0, 0x84d9, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7, 0x400, 0x6]}, &(0x7f0000000200)=0x100) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000009c0)={0x56, 0x1, 0x7ff, {0x7f, 0x2}, {0x3ff, 0x100000000}, @period={0x5a, 0x83, 0x100000000, 0x6, 0x1, {0xd1a, 0x703, 0x3, 0x8000000000000}, 0x6, &(0x7f0000000680)=[0x5, 0x30e, 0x9, 0x1ff, 0x3, 0xfffffffffffffbff]}}) [ 283.806921] __x64_sys_ioctl+0x4a/0x70 [ 283.810864] do_syscall_64+0xbe/0x100 [ 283.814714] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 283.819938] RIP: 0033:0x457519 [ 283.823163] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.842098] RSP: 002b:00007f1c8f84fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.849862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 283.857161] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 283.864452] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 283.871746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c8f8506d4 [ 283.879048] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 283.887701] Kernel Offset: disabled [ 283.891380] Rebooting in 86400 seconds..