[ 57.684718] audit: type=1800 audit(1539152885.720:27): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 59.195987] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 62.613004] random: sshd: uninitialized urandom read (32 bytes read) [ 63.083030] random: sshd: uninitialized urandom read (32 bytes read) [ 65.680000] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. [ 71.564615] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 06:28:21 fuzzer started [ 76.194691] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 06:28:26 dialing manager at 10.128.0.26:44001 2018/10/10 06:28:26 syscalls: 1 2018/10/10 06:28:26 code coverage: enabled 2018/10/10 06:28:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 06:28:26 setuid sandbox: enabled 2018/10/10 06:28:26 namespace sandbox: enabled 2018/10/10 06:28:26 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 06:28:26 fault injection: enabled 2018/10/10 06:28:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 06:28:26 net packed injection: enabled 2018/10/10 06:28:26 net device setup: enabled [ 81.159784] random: crng init done 06:30:27 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x3, 0x3, 0x91e}) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000054c0), 0x0) gettid() getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000480)={0x0, 0x2}) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000340)) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000000280)={0x0, {}, {{0x2, 0x4e20}}}, 0x108) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000100)={0x111000, 0x0, 0x0, 0x4, 0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0xf) syz_open_procfs(0x0, &(0x7f0000000280)='net/if_inet6\x00') [ 200.461485] IPVS: ftp: loaded support on port[0] = 21 [ 202.839731] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.846297] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.854873] device bridge_slave_0 entered promiscuous mode [ 203.015213] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.021672] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.030387] device bridge_slave_1 entered promiscuous mode [ 203.172881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.312437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.755998] bond0: Enslaving bond_slave_0 as an active interface with an up link 06:30:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x800454e1, 0x0) [ 203.930530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.456829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.464085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.830877] IPVS: ftp: loaded support on port[0] = 21 [ 205.185528] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.193750] team0: Port device team_slave_0 added [ 205.440415] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.448577] team0: Port device team_slave_1 added [ 205.757627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 205.764775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.773848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.057237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.064460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.073727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.233080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.240731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.250014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.488099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.495840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.505232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.675460] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.682086] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.690600] device bridge_slave_0 entered promiscuous mode [ 208.823471] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.829960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.837035] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.843572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.852655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.034496] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.040958] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.049492] device bridge_slave_1 entered promiscuous mode [ 209.314640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.457238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.612460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:30:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000c9500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x180000000000000a, 0xe, 0x29, &(0x7f0000000000)="b90703e69bbf08bb6400001086dd", &(0x7f0000000140)=""/41, 0x69}, 0x28) [ 210.052750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.327974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.684905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.692272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.899083] IPVS: ftp: loaded support on port[0] = 21 [ 211.009679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.016882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.790524] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.798695] team0: Port device team_slave_0 added [ 211.962867] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.970894] team0: Port device team_slave_1 added [ 212.210725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.218014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.227039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.500573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.507777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.516928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.846264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.854049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.863416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.172144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.179830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.189112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.944109] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.950602] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.959439] device bridge_slave_0 entered promiscuous mode [ 216.228597] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.235276] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.244058] device bridge_slave_1 entered promiscuous mode [ 216.458002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.647974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.689973] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.696630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.703794] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.710259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.719284] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.561651] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.692385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.872691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.214857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.222055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:30:46 executing program 3: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x1102001bfc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000340)) [ 218.618186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.625347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.614231] IPVS: ftp: loaded support on port[0] = 21 [ 219.712158] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.720353] team0: Port device team_slave_0 added [ 220.157288] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.165823] team0: Port device team_slave_1 added [ 220.510502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.517669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.526648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.546652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.837342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.844673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.853503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.193755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.201370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.210710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.634301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.642211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.651340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.028897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.337629] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.344080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.351757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.690115] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.595024] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.601531] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.610152] device bridge_slave_0 entered promiscuous mode [ 225.806373] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.812929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.819808] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.826417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.835534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.038150] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.045023] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.053744] device bridge_slave_1 entered promiscuous mode [ 226.400691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.412685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.729612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.900975] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.305535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.645237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.652542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:30:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x400454dc, 0x70dfff) [ 229.070033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.077233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.278446] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.286604] team0: Port device team_slave_0 added [ 230.410660] IPVS: ftp: loaded support on port[0] = 21 [ 230.668462] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.676855] team0: Port device team_slave_1 added [ 231.116486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.123669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.133177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.534060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.552050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.561038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.892296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.983577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.991214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.000354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.400366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 232.408353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.417374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.485805] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.326387] hrtimer: interrupt took 52151 ns [ 234.344640] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 234.955042] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.961476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.969625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:31:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x180000000000000a, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e100500", &(0x7f0000000140)=""/41, 0x69}, 0x28) 06:31:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x900, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x1, @dev}, 0x1c) recvmmsg(r0, &(0x7f0000000080), 0xb, 0x2000, &(0x7f0000000380)={0x77359400}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) 06:31:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x900, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x1, @dev}, 0x1c) recvmmsg(r0, &(0x7f0000000080), 0xb, 0x2000, &(0x7f0000000380)={0x77359400}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 236.632023] 8021q: adding VLAN 0 to HW filter on device team0 06:31:04 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x7}, 0x28, 0x0) r1 = socket$inet6(0xa, 0x200000007, 0x6) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xf0e}, 0x1c) syz_emit_ethernet(0x190, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 06:31:05 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xa06, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0xf9cd, 0x1c, [0x4, 0x2ef, 0x8000, 0x81, 0xafb9, 0x7ff, 0x1]}) [ 237.890159] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.896740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.903808] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.910258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.918613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 06:31:06 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xa06, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0xf9cd, 0x1c, [0x4, 0x2ef, 0x8000, 0x81, 0xafb9, 0x7ff, 0x1]}) [ 238.012635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.084189] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.090663] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.099524] device bridge_slave_0 entered promiscuous mode [ 238.551616] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.558316] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.566893] device bridge_slave_1 entered promiscuous mode 06:31:06 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="10c7ed683c725c6fcf1790bab15df9e7b9c6fb95", 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0xff, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000000000000000000000000000004400000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000100000000000004900000000000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000d35ae848f178696e00000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000008d00000000000000", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 06:31:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x402) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e20, 0xaff, @mcast2, 0x535}}, 0x8, 0x8, 0xa1c, 0x3, 0x874790fa970cecb8}, 0x98) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xf000, 0x6000}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4030ae7b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)}) [ 239.065420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.487657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.629009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.018294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.393623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.400715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.710776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.718183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.742507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.758396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.766628] team0: Port device team_slave_0 added [ 243.088417] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.096617] team0: Port device team_slave_1 added [ 243.425402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 243.432674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.441309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.681972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 243.689032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.698227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.847029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.916656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.924399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.933256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.333908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.341489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.350584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 06:31:13 executing program 1: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x10001}, 0x28, 0x0) [ 244.981387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.987901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.995652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.937008] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.366916] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.373484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.380406] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.386991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.395589] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.402313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.288351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.040289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 06:31:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200000000000008001b00060000001800120008000100767469000c00020008000400e0000002"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 251.818294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.824768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.832675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.375402] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.873414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.430997] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.937978] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.944521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.952700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.311329] 8021q: adding VLAN 0 to HW filter on device team0 06:31:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="430200000000000008001b00060000001800120008000100767469000c00020008000400e0000002"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) 06:31:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x400454dc, 0x70dfff) 06:31:26 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000340)="8a80d8625001cf7d0bb898afe80397f0a083e029f9080ed669e09a0cda0707e0c4ac7293fb2cc5023941192369fe944ff6c4b292a149c6f47cc02d5ec92ce3de359de1c11bdbe249b4aba08f6d2211144f21da476fad03d076c56df1", 0x5c, 0xfffffffffffffffd) r4 = getgid() keyctl$chown(0x4, r3, r2, r4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8000) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) getsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000440), &(0x7f0000000480)=0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x2, r1, 0x11, r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000300), 0x3) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0)={0x2, 0xd0c, 0x6, 0x1000, 0x9, 0x100, 0x2, 0x2, 0x8001, 0x4, 0xcc6c}, 0xb) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000040)) 06:31:26 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0xeecc, 0x8000}}, 0x28) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @rand_addr}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@mcast2, @loopback, @loopback, 0x80000000, 0x1, 0x81, 0x0, 0x800, 0x200000, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@empty, @loopback, @loopback, 0x9f, 0x6, 0x4, 0x400, 0x8, 0x4800040, r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0xc679f4e04cf123b, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000003c0)=0x16, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={@mcast2, @remote, @remote, 0x9, 0x1000, 0xc0, 0x100, 0x8001, 0x1, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@local, @mcast2, @remote, 0x400, 0x6, 0x740, 0x100, 0x3, 0x80200, r1}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000500)={0x1, 0xaf1a}) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000540)) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000580)) setxattr$trusted_overlay_origin(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000006c0)={r4}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000700)=0x9, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x2000) accept4(r5, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000800)=0x80, 0x80000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000840)={'ah\x00'}, &(0x7f0000000880)=0x1e) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000008c0)={0x6, {{0x2, 0x4e24, @multicast1}}}, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000980)={0x0, 0xe6, "c39e9df1f4b2e705983a101c7a1e45071eaac9d11272f802f2c1ec103ff6456dc104f153b0286dc4094c32625af0fea1c8b2199185288aff6cbc41eed4a572daeb1865affabba8caa22c92a5479e3f5c1c5c38ca4a6db7949a58864c5213d0533871d3ee8e07157d89cd086d5d832af52644676be087fd3ae7ec8283ca0615244535a687c02cc9e0d03deb484552252d86bf9a166790130ae815a5b321beb08a29ff7376c284b666b0758fcf4979e47a81da851ee3c7f012dd3b25ad0fea36aaf0907ea8e233a4fcdddddccd6047475a20b66b878728a72239eba8202d39c41974c1780cbbb4"}, &(0x7f0000000a80)=0xee) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000ac0)={r6, 0x3, 0x10}, &(0x7f0000000b00)=0xc) r7 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10030, r5, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000b40)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000b80)={0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0x68, 0x0, &(0x7f0000000c80)=[@increfs_done={0x40106308, r7, 0x3}, @decrefs, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000bc0)=[@flat={0x77682a85, 0xb, r8, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x3a}, @flat={0x77622a85, 0xb, r9}], &(0x7f0000000c40)=[0x30, 0x38, 0x0]}}], 0x20, 0x0, &(0x7f0000000d00)="6e4d37a7a251bc06be6745b04cbfb91f9a5b79fdc2132ef3a96a14f1a46f3361"}) syz_open_dev$mice(&(0x7f0000000d80)='/dev/input/mice\x00', 0x0, 0xa0000) 06:31:26 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)}}], 0x1, 0x0) 06:31:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) 06:31:26 executing program 3: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) link(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file1\x00') open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 06:31:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa347991907000000000000005e44573eef5fd0f423a5cfb386e4cc997c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e682e3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000e70da2fbe1595f24f3f202ebcb7774bb5dc9a4bdcc24ef5fe2d20b0012352c8536e5f07e7ccc9b973570123f8abef5118b2488a804b6fe27f839d17fa637636c6ba3b2b4fbfdd348f276c71576fbf514d52f72b29e83f07da15ec5da20d84d47907ca11c3c4944207ddcd90bcd238ab5391ebc7bee5562864794fa504ce1cc4eb26ff2040ef99dd2d4d29fd96ce9822c323db0cc4078f7d4de83e5bfc6b2f2543407f1bc4531acf7") clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) pread64(r0, &(0x7f0000000080), 0xff7c, 0x0) 06:31:27 executing program 0: 06:31:27 executing program 2: 06:31:27 executing program 4: 06:31:27 executing program 2: 06:31:27 executing program 0: 06:31:27 executing program 4: 06:31:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80000000001, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000200)={{}, "73797a310000000000004b1a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800"}) [ 259.797025] input: syz1 as /devices/virtual/input/input5 [ 259.852665] input: syz1 as /devices/virtual/input/input6 [ 260.240512] IPVS: ftp: loaded support on port[0] = 21 [ 261.544781] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.551185] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.559398] device bridge_slave_0 entered promiscuous mode [ 261.637991] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.644511] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.652467] device bridge_slave_1 entered promiscuous mode [ 261.732270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 261.812388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.049196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.138921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.220248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 262.227683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.306942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 262.313947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.550699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.558434] team0: Port device team_slave_0 added [ 262.636369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.643982] team0: Port device team_slave_1 added [ 262.722441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.805458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.886300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.893778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.902681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.984817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.992539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.001605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.898136] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.904667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.911388] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.917955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.925974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.193212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.138541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.437523] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.725175] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.731425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.739468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.135318] 8021q: adding VLAN 0 to HW filter on device team0 06:31:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80003, 0x0) 06:31:38 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2717, &(0x7f0000000100)=""/13, &(0x7f0000000000)=0x28) 06:31:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd08dfd7ebd3") ioctl$KVM_RUN(r2, 0xae80, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)="491e99b9ef92a45ab6f641bcc7dd6b5c6cc8982d0503a8d4c79d601654d561973305e3c2197ac92eccb56ea561f14ca33d5d91f40eb081", 0x37}], 0x1, 0x0) 06:31:38 executing program 4: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000400000000005e510befccd7", 0x2e}], 0x1, &(0x7f0000000200)}, 0x0) 06:31:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x268) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmsg(r0, &(0x7f0000001340)={&(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "3d086bfbef6ceccebd8b96edf863ccf3bee36de82beb7232265849e62938fbfbdea2e1ca32691724bfffaaaaddf9c9047f6581cb5830b89d16a4507a735121"}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001380)}, 0x0) 06:31:38 executing program 3: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) link(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file1\x00') open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') [ 270.302925] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 270.344217] ================================================================== [ 270.351682] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 270.359330] CPU: 0 PID: 7912 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #65 [ 270.366538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.375902] Call Trace: [ 270.378532] dump_stack+0x306/0x460 [ 270.382189] ? vmx_set_constant_host_state+0x1778/0x1830 [ 270.387700] kmsan_report+0x1a2/0x2e0 [ 270.391539] __msan_warning+0x7c/0xe0 [ 270.395381] vmx_set_constant_host_state+0x1778/0x1830 [ 270.400722] vmx_create_vcpu+0x3e6f/0x7870 [ 270.404992] ? kmsan_set_origin_inline+0x6b/0x120 [ 270.409871] ? __msan_poison_alloca+0x17a/0x210 [ 270.414590] ? vmx_vm_init+0x340/0x340 [ 270.418514] kvm_arch_vcpu_create+0x25d/0x2f0 [ 270.423045] kvm_vm_ioctl+0x13fd/0x33d0 [ 270.427060] ? __msan_poison_alloca+0x17a/0x210 [ 270.431776] ? do_vfs_ioctl+0x18a/0x2810 [ 270.435866] ? __se_sys_ioctl+0x1da/0x270 [ 270.440041] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 270.444917] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 270.449831] do_vfs_ioctl+0xcf3/0x2810 [ 270.453786] ? security_file_ioctl+0x92/0x200 [ 270.458327] __se_sys_ioctl+0x1da/0x270 [ 270.462349] __x64_sys_ioctl+0x4a/0x70 [ 270.466286] do_syscall_64+0xbe/0x100 [ 270.470139] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 270.475364] RIP: 0033:0x457579 [ 270.478591] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.497521] RSP: 002b:00007fe385020c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.505282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 270.512574] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 270.519864] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.527186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3850216d4 [ 270.534481] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 270.541783] 06:31:38 executing program 4: [ 270.543435] Local variable description: ----dt@vmx_set_constant_host_state [ 270.550475] Variable was created at: [ 270.554213] vmx_set_constant_host_state+0x2b0/0x1830 [ 270.559426] vmx_create_vcpu+0x3e6f/0x7870 [ 270.563679] ================================================================== [ 270.571077] Disabling lock debugging due to kernel taint [ 270.576557] Kernel panic - not syncing: panic_on_warn set ... [ 270.576557] [ 270.583969] CPU: 0 PID: 7912 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #65 [ 270.592579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.602037] Call Trace: [ 270.604665] dump_stack+0x306/0x460 [ 270.608348] panic+0x54c/0xafa [ 270.611635] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 270.617133] kmsan_report+0x2d3/0x2e0 [ 270.620989] __msan_warning+0x7c/0xe0 [ 270.624839] vmx_set_constant_host_state+0x1778/0x1830 [ 270.630169] vmx_create_vcpu+0x3e6f/0x7870 [ 270.634444] ? kmsan_set_origin_inline+0x6b/0x120 [ 270.639365] ? __msan_poison_alloca+0x17a/0x210 06:31:38 executing program 0: 06:31:38 executing program 1: [ 270.644086] ? vmx_vm_init+0x340/0x340 [ 270.648010] kvm_arch_vcpu_create+0x25d/0x2f0 [ 270.652560] kvm_vm_ioctl+0x13fd/0x33d0 [ 270.656585] ? __msan_poison_alloca+0x17a/0x210 [ 270.661292] ? do_vfs_ioctl+0x18a/0x2810 [ 270.665386] ? __se_sys_ioctl+0x1da/0x270 [ 270.669584] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 270.674471] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 270.679382] do_vfs_ioctl+0xcf3/0x2810 [ 270.683335] ? security_file_ioctl+0x92/0x200 [ 270.687938] __se_sys_ioctl+0x1da/0x270 [ 270.692000] __x64_sys_ioctl+0x4a/0x70 [ 270.695930] do_syscall_64+0xbe/0x100 [ 270.699776] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 270.704993] RIP: 0033:0x457579 [ 270.708225] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.727146] RSP: 002b:00007fe385020c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.734904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 270.742196] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 270.749484] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.756777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3850216d4 [ 270.764068] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 270.772520] Kernel Offset: disabled [ 270.776162] Rebooting in 86400 seconds..