[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 28.845483] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.077874] random: sshd: uninitialized urandom read (32 bytes read) [ 33.565186] random: sshd: uninitialized urandom read (32 bytes read) [ 34.790292] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.23' (ECDSA) to the list of known hosts. [ 40.345405] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/14 10:34:08 fuzzer started 2018/05/14 10:34:09 dialing manager at 10.128.0.26:33385 [ 66.959915] can: request_module (can-proto-0) failed. [ 66.971483] can: request_module (can-proto-0) failed. 2018/05/14 10:34:36 kcov=true, comps=false 2018/05/14 10:34:41 executing program 0: unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/cgroup\x00') setns(r0, 0x0) 2018/05/14 10:34:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfde8, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev={0xac, 0x14, 0x14}, @rand_addr=0x53d93f6b, {[@lsrr={0x83, 0x3}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, 0x0) 2018/05/14 10:34:41 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0) read(r0, &(0x7f00000001c0)=""/86, 0x56) 2018/05/14 10:34:41 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000f72fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/05/14 10:34:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd2fd8)="260000005e0009000000eaf8ffffff01000000000200000000000000000008db1ee9ff4435ea", 0x26) 2018/05/14 10:34:41 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x3d3, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0xae, 0x0, &(0x7f0000000580)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/14 10:34:41 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f000000bffc), &(0x7f0000009000)=0x4) 2018/05/14 10:34:41 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000012c0)='attr/fscreate\x00') exit(0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0'}, 0x4) [ 73.872807] IPVS: ftp: loaded support on port[0] = 21 [ 73.915108] IPVS: ftp: loaded support on port[0] = 21 [ 74.023225] IPVS: ftp: loaded support on port[0] = 21 [ 74.034114] IPVS: ftp: loaded support on port[0] = 21 [ 74.046854] IPVS: ftp: loaded support on port[0] = 21 [ 74.071680] IPVS: ftp: loaded support on port[0] = 21 [ 74.080703] IPVS: ftp: loaded support on port[0] = 21 [ 74.083522] IPVS: ftp: loaded support on port[0] = 21 [ 75.956832] ip (4715) used greatest stack depth: 54456 bytes left [ 77.060922] ip (4806) used greatest stack depth: 54344 bytes left [ 77.343621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.350125] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.380250] device bridge_slave_0 entered promiscuous mode [ 77.396965] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.403444] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.413871] device bridge_slave_0 entered promiscuous mode [ 77.461713] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.468211] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.510210] device bridge_slave_0 entered promiscuous mode [ 77.528220] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.534693] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560009] device bridge_slave_0 entered promiscuous mode [ 77.579240] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.585726] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.595768] device bridge_slave_0 entered promiscuous mode [ 77.613920] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.620397] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.627972] device bridge_slave_0 entered promiscuous mode [ 77.641105] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.647571] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.675439] device bridge_slave_1 entered promiscuous mode [ 77.689278] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.695737] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.713813] device bridge_slave_1 entered promiscuous mode [ 77.722073] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.728616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.738963] device bridge_slave_1 entered promiscuous mode [ 77.750114] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.756570] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.780108] device bridge_slave_0 entered promiscuous mode [ 77.795163] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.801640] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.811446] device bridge_slave_0 entered promiscuous mode [ 77.835343] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.841835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.861405] device bridge_slave_1 entered promiscuous mode [ 77.868475] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.874975] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.890132] device bridge_slave_1 entered promiscuous mode [ 77.905281] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.912647] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.933960] device bridge_slave_1 entered promiscuous mode [ 77.946410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.954349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.969655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.978405] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.984878] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.020121] device bridge_slave_1 entered promiscuous mode [ 78.038617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.046208] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.052695] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.080215] device bridge_slave_1 entered promiscuous mode [ 78.099877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.135673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.145367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.154706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.162607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.251722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.262482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.277811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.333558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.358608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.438520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.454872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.567484] ip (4907) used greatest stack depth: 54136 bytes left [ 78.726677] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.793424] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.859256] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.941433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.955733] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.994559] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.027416] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.048723] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.080565] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.093176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.116846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.203804] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.230515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.300573] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.318765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.331879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.340823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.364724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.397930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.405011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.436129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.443357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.464622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.472003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.490430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.503212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.536532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.565145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.603953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.610973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.629850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.643764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.676321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.683357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.694269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.701296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.738866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.746896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.812199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.819527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.848933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.856099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.902456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.909591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.065865] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.084079] team0: Port device team_slave_0 added [ 80.143801] ip (5014) used greatest stack depth: 54104 bytes left [ 80.171746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.190734] team0: Port device team_slave_0 added [ 80.269761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.296618] team0: Port device team_slave_0 added [ 80.324801] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.343539] team0: Port device team_slave_1 added [ 80.392490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.414570] team0: Port device team_slave_1 added [ 80.439632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.466500] team0: Port device team_slave_0 added [ 80.489680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.520399] team0: Port device team_slave_1 added [ 80.535409] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.550003] team0: Port device team_slave_0 added [ 80.557758] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.574827] team0: Port device team_slave_0 added [ 80.599240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.607280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.625435] team0: Port device team_slave_0 added [ 80.636974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.658929] team0: Port device team_slave_1 added [ 80.667371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.685801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.704422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.711988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.732363] team0: Port device team_slave_0 added [ 80.755516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.774289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.794074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.801988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.813325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.827338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.835588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.857640] team0: Port device team_slave_1 added [ 80.873239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.881298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.897815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.914749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.942729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.966573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.976383] team0: Port device team_slave_1 added [ 80.984467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.991814] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.000015] team0: Port device team_slave_1 added [ 81.010391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.019952] team0: Port device team_slave_1 added [ 81.037408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.056378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.099421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.107847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.127961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.138356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.146410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.153915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.161969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.186761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.208220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.226345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.240466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.250427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.277785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.286980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.299648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.307202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.316714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.345792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.361873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.380418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.389651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.399608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.409618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.417966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.435685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.443419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.452548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.467126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.488004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.503009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.521366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.540616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.557852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.566863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.574246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.582836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.596534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.604140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.615441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.631316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.654731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.662287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.680261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.700960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.717247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.734869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.742661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.750361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.776744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.785688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.794674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.805923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.816913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.825926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.848409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.870876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.878347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.902666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.931850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.956091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.983840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.997947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.008182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.024767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.054234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.069423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.132766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.147862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.162227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.190106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.199286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.210543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.218215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.258162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.309600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.335423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.348418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.356823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.056577] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.063100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.071942] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.078401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.103935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.110641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.149736] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.156329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.163228] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.171790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.219601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.230834] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.237349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.244212] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.250662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.301329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.492912] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.499409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.506251] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.512701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.522451] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.529283] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.535743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.544205] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.550674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.560528] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.590539] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.597094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.603924] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.610527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.619788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.628795] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.635266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.642137] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.648583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.691669] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.699814] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.706248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.713079] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.719505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.731352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.151484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.163071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.197293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.216897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.241834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.261889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.269834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.746448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.779987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.837231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.869660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.009334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.045906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.073950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.435544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.513919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.609905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.627631] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.682275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.803092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.812846] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.914888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.237772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.300920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.307249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.318887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.384431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.390740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.400424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.460871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.467224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.476834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.541874] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.548268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.561821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.642148] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.648495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.659202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.748712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.755197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.766877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.824324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.830760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.846921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.176287] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.193265] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.217920] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.249242] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.262320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.279896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.321284] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.505709] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.628977] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.675252] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.139592] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/14 10:35:08 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0) read(r0, &(0x7f00000001c0)=""/86, 0x56) 2018/05/14 10:35:08 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000f72fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/05/14 10:35:08 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f000000bffc), &(0x7f0000009000)=0x4) 2018/05/14 10:35:08 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0) read(r0, &(0x7f00000001c0)=""/86, 0x56) 2018/05/14 10:35:09 executing program 0: unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/cgroup\x00') setns(r0, 0x0) 2018/05/14 10:35:09 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000f72fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/05/14 10:35:09 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd2fd8)="260000005e0009000000eaf8ffffff01000000000200000000000000000008db1ee9ff4435ea", 0x26) 2018/05/14 10:35:09 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f000000bffc), &(0x7f0000009000)=0x4) 2018/05/14 10:35:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfde8, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev={0xac, 0x14, 0x14}, @rand_addr=0x53d93f6b, {[@lsrr={0x83, 0x3}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, 0x0) 2018/05/14 10:35:09 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0) read(r0, &(0x7f00000001c0)=""/86, 0x56) 2018/05/14 10:35:09 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000012c0)='attr/fscreate\x00') exit(0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0'}, 0x4) 2018/05/14 10:35:09 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x3d3, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0xae, 0x0, &(0x7f0000000580)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/14 10:35:09 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000001ffc)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f000000bffc), &(0x7f0000009000)=0x4) 2018/05/14 10:35:09 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000c2dffb)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f000031e000)='user\x00', 0x0) 2018/05/14 10:35:09 executing program 0: unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/cgroup\x00') setns(r0, 0x0) 2018/05/14 10:35:10 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000012c0)='attr/fscreate\x00') exit(0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0'}, 0x4) 2018/05/14 10:35:10 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000f72fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/05/14 10:35:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfde8, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev={0xac, 0x14, 0x14}, @rand_addr=0x53d93f6b, {[@lsrr={0x83, 0x3}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, 0x0) 2018/05/14 10:35:10 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000c2dffb)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f000031e000)='user\x00', 0x0) 2018/05/14 10:35:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd2fd8)="260000005e0009000000eaf8ffffff01000000000200000000000000000008db1ee9ff4435ea", 0x26) 2018/05/14 10:35:10 executing program 5: syz_emit_ethernet(0x3eb, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:10 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x3d3, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0xae, 0x0, &(0x7f0000000580)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/14 10:35:10 executing program 0: unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/cgroup\x00') setns(r0, 0x0) 2018/05/14 10:35:10 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000c2dffb)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f000031e000)='user\x00', 0x0) 2018/05/14 10:35:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") syz_emit_ethernet(0xfde8, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev={0xac, 0x14, 0x14}, @rand_addr=0x53d93f6b, {[@lsrr={0x83, 0x3}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}}}, 0x0) 2018/05/14 10:35:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x2000024d, &(0x7f0000000940)=@raw, &(0x7f0000000080)="47505d04", 0x15, 0xeb, &(0x7f0000000fc0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) 2018/05/14 10:35:10 executing program 5: syz_emit_ethernet(0x3eb, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000fd2fd8)="260000005e0009000000eaf8ffffff01000000000200000000000000000008db1ee9ff4435ea", 0x26) 2018/05/14 10:35:10 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="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", 0x3d3, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0xae, 0x0, &(0x7f0000000580)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/14 10:35:10 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x1102}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}) 2018/05/14 10:35:10 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) request_key(&(0x7f0000c2dffb)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f000031e000)='user\x00', 0x0) 2018/05/14 10:35:11 executing program 5: syz_emit_ethernet(0x3eb, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0x2c9, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1}, 0x0) 2018/05/14 10:35:11 executing program 7: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bind$can_raw(r0, &(0x7f0000000180)={0x1d}, 0x10) 2018/05/14 10:35:11 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000012c0)='attr/fscreate\x00') exit(0x0) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0'}, 0x4) 2018/05/14 10:35:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x2000024d, &(0x7f0000000940)=@raw, &(0x7f0000000080)="47505d04", 0x15, 0xeb, &(0x7f0000000fc0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) 2018/05/14 10:35:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000773000)=0x200000000404, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/05/14 10:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0x5450) 2018/05/14 10:35:11 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 2018/05/14 10:35:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x2000024d, &(0x7f0000000940)=@raw, &(0x7f0000000080)="47505d04", 0x15, 0xeb, &(0x7f0000000fc0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) 2018/05/14 10:35:11 executing program 5: syz_emit_ethernet(0x3eb, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0x5450) 2018/05/14 10:35:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0x2c9, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1}, 0x0) 2018/05/14 10:35:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000773000)=0x200000000404, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/05/14 10:35:11 executing program 7: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bind$can_raw(r0, &(0x7f0000000180)={0x1d}, 0x10) 2018/05/14 10:35:11 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 2018/05/14 10:35:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x2000024d, &(0x7f0000000940)=@raw, &(0x7f0000000080)="47505d04", 0x15, 0xeb, &(0x7f0000000fc0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000011f3d)=""/195}, 0x48) 2018/05/14 10:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0x5450) 2018/05/14 10:35:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000773000)=0x200000000404, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/05/14 10:35:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0x2c9, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1}, 0x0) 2018/05/14 10:35:12 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240), 0x8) 2018/05/14 10:35:12 executing program 7: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bind$can_raw(r0, &(0x7f0000000180)={0x1d}, 0x10) 2018/05/14 10:35:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="c62626206d01bf012cf66f") r1 = gettid() capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)) 2018/05/14 10:35:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(r0, 0x5450) 2018/05/14 10:35:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x7ffff, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:12 executing program 6: unshare(0x8000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x80}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000eed000), &(0x7f0000b88000)="13", 0xfffffffffffffffc}, 0x20) 2018/05/14 10:35:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x7ffff, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/05/14 10:35:12 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}], 0x1c) 2018/05/14 10:35:12 executing program 7: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bind$can_raw(r0, &(0x7f0000000180)={0x1d}, 0x10) 2018/05/14 10:35:12 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="c62626206d01bf012cf66f") r1 = gettid() capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)) 2018/05/14 10:35:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0x2c9, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1}, 0x0) 2018/05/14 10:35:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000773000)=0x200000000404, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2}, 0x10) 2018/05/14 10:35:12 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240), 0x8) [ 104.820654] ================================================================== [ 104.828096] BUG: KMSAN: uninit-value in __sctp_v6_cmp_addr+0x49a/0x850 [ 104.834771] CPU: 0 PID: 6814 Comm: syz-executor2 Not tainted 4.17.0-rc3+ #90 [ 104.841961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.851326] Call Trace: [ 104.853925] dump_stack+0x185/0x1d0 [ 104.857568] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 104.862080] kmsan_report+0x142/0x240 [ 104.865902] __msan_warning_32+0x6c/0xb0 [ 104.869980] __sctp_v6_cmp_addr+0x49a/0x850 [ 104.874325] sctp_inet6_cmp_addr+0x3dc/0x400 [ 104.878753] ? sctp_inet6_af_supported+0xf0/0xf0 [ 104.883525] sctp_bind_addr_conflict+0x272/0x3f0 [ 104.888303] sctp_get_port_local+0x1709/0x1be0 [ 104.892906] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 104.898294] sctp_do_bind+0xa26/0xdf0 [ 104.902121] sctp_setsockopt_bindx+0x6c4/0x8f0 [ 104.906722] sctp_setsockopt+0x1c50/0x11600 [ 104.911063] ? kmsan_set_origin_inline+0x6b/0x120 [ 104.915948] ? __msan_poison_alloca+0x15c/0x1d0 [ 104.920627] ? __fdget+0x4e/0x60 [ 104.924003] ? __fget_light+0x56/0x710 [ 104.927899] ? sctp_shutdown+0x270/0x270 [ 104.931970] sock_common_setsockopt+0x136/0x170 [ 104.936653] ? sock_common_recvmsg+0x270/0x270 [ 104.941248] __sys_setsockopt+0x4af/0x560 [ 104.945415] __x64_sys_setsockopt+0x15c/0x1c0 [ 104.949949] do_syscall_64+0x154/0x220 [ 104.953855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.959050] RIP: 0033:0x4559e9 [ 104.962236] RSP: 002b:00007f36ca89fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.969944] RAX: ffffffffffffffda RBX: 00007f36ca8a06d4 RCX: 00000000004559e9 [ 104.977230] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 104.984510] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 104.991792] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 104.999073] R13: 0000000000000651 R14: 00000000006fd838 R15: 0000000000000000 [ 105.006358] [ 105.007984] Uninit was created at: [ 105.011540] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 105.016684] kmsan_kmalloc+0x94/0x100 [ 105.020557] __kmalloc_node+0xe25/0x11f0 [ 105.024635] kvmalloc_node+0x1a1/0x2e0 [ 105.028531] xt_replace_table+0x35e/0xbd0 [ 105.032689] __do_replace+0x2bc/0x1020 [ 105.036592] do_ip6t_set_ctl+0x739/0x930 [ 105.040667] nf_setsockopt+0x476/0x4d0 [ 105.044583] ipv6_setsockopt+0x1e2/0x340 [ 105.048655] tcp_setsockopt+0x1bb/0x1f0 [ 105.052647] sock_common_setsockopt+0x136/0x170 [ 105.057335] __sys_setsockopt+0x4af/0x560 [ 105.061504] __x64_sys_setsockopt+0x15c/0x1c0 [ 105.066015] do_syscall_64+0x154/0x220 [ 105.069920] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.075123] ================================================================== [ 105.082470] Disabling lock debugging due to kernel taint [ 105.087904] Kernel panic - not syncing: panic_on_warn set ... [ 105.087904] [ 105.095258] CPU: 0 PID: 6814 Comm: syz-executor2 Tainted: G B 4.17.0-rc3+ #90 [ 105.103817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.113154] Call Trace: [ 105.115736] dump_stack+0x185/0x1d0 [ 105.119352] panic+0x39d/0x940 [ 105.122546] ? __sctp_v6_cmp_addr+0x49a/0x850 [ 105.127033] kmsan_report+0x238/0x240 [ 105.130827] __msan_warning_32+0x6c/0xb0 [ 105.134875] __sctp_v6_cmp_addr+0x49a/0x850 [ 105.139187] sctp_inet6_cmp_addr+0x3dc/0x400 [ 105.143587] ? sctp_inet6_af_supported+0xf0/0xf0 [ 105.148938] sctp_bind_addr_conflict+0x272/0x3f0 [ 105.153702] sctp_get_port_local+0x1709/0x1be0 [ 105.158275] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 105.163636] sctp_do_bind+0xa26/0xdf0 [ 105.167428] sctp_setsockopt_bindx+0x6c4/0x8f0 [ 105.172000] sctp_setsockopt+0x1c50/0x11600 [ 105.176324] ? kmsan_set_origin_inline+0x6b/0x120 [ 105.181153] ? __msan_poison_alloca+0x15c/0x1d0 [ 105.185807] ? __fdget+0x4e/0x60 [ 105.189159] ? __fget_light+0x56/0x710 [ 105.193035] ? sctp_shutdown+0x270/0x270 [ 105.197090] sock_common_setsockopt+0x136/0x170 [ 105.201749] ? sock_common_recvmsg+0x270/0x270 [ 105.206316] __sys_setsockopt+0x4af/0x560 [ 105.210455] __x64_sys_setsockopt+0x15c/0x1c0 [ 105.214936] do_syscall_64+0x154/0x220 [ 105.218812] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 105.223983] RIP: 0033:0x4559e9 [ 105.227158] RSP: 002b:00007f36ca89fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.234861] RAX: ffffffffffffffda RBX: 00007f36ca8a06d4 RCX: 00000000004559e9 [ 105.242117] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000014 [ 105.249458] RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 [ 105.256718] R10: 0000000020000040 R11: 0000000000000246 R12: 00000000ffffffff [ 105.263980] R13: 0000000000000651 R14: 00000000006fd838 R15: 0000000000000000 [ 105.271795] Dumping ftrace buffer: [ 105.275324] (ftrace buffer empty) [ 105.279021] Kernel Offset: disabled [ 105.282631] Rebooting in 86400 seconds..