[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 59.920349] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 61.572190] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 61.956016] sshd (6189) used greatest stack depth: 53184 bytes left [ 62.029746] random: sshd: uninitialized urandom read (32 bytes read) [ 64.168755] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. [ 69.958351] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 06:00:07 fuzzer started [ 74.672178] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 06:00:12 dialing manager at 10.128.0.26:44001 2018/10/10 06:00:12 syscalls: 1 2018/10/10 06:00:12 code coverage: enabled 2018/10/10 06:00:12 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 06:00:12 setuid sandbox: enabled 2018/10/10 06:00:12 namespace sandbox: enabled 2018/10/10 06:00:12 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 06:00:12 fault injection: enabled 2018/10/10 06:00:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 06:00:12 net packed injection: enabled 2018/10/10 06:00:12 net device setup: enabled [ 79.409953] random: crng init done 06:02:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)}, 0x0) [ 205.934624] IPVS: ftp: loaded support on port[0] = 21 [ 208.364118] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.370644] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.379457] device bridge_slave_0 entered promiscuous mode [ 208.540630] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.547327] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.556065] device bridge_slave_1 entered promiscuous mode [ 208.701167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.841790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 06:02:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x0, r1+10000000}, &(0x7f0000000180), 0x0) r2 = dup(r0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000780)) [ 209.306206] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.553356] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.746671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.754075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.025887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.033357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.195060] IPVS: ftp: loaded support on port[0] = 21 [ 210.809733] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.818347] team0: Port device team_slave_0 added [ 211.090593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.098954] team0: Port device team_slave_1 added [ 211.331546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 211.339053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.348359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.604387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.611617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.620972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.788913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.796968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.806195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.955005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.962813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.972224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.183132] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.189608] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.198200] device bridge_slave_0 entered promiscuous mode [ 214.412426] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.418922] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.427672] device bridge_slave_1 entered promiscuous mode 06:02:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x20000001) [ 214.716958] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.723581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.730559] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.737154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.745994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.758260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.014722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.212004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.558626] IPVS: ftp: loaded support on port[0] = 21 [ 215.923548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.247364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.474701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.481901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.762592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.769767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.524983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.534076] team0: Port device team_slave_0 added [ 217.794586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.802755] team0: Port device team_slave_1 added [ 218.133421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.142798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.151597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.438469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.445816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.454860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.761085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.768927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.778418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.068146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.075859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.085307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.207718] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.214370] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.222865] device bridge_slave_0 entered promiscuous mode [ 220.586358] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.593172] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.602046] device bridge_slave_1 entered promiscuous mode [ 220.927867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.181239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.038201] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.121616] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.128200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.135287] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.141828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.150382] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.428370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.494414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.672752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.679802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.922256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.929331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:02:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x0) [ 223.573357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.581370] team0: Port device team_slave_0 added [ 223.960540] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.968885] team0: Port device team_slave_1 added [ 224.299876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.307108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.316039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.666255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.673646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.682759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.845438] IPVS: ftp: loaded support on port[0] = 21 [ 225.039146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.046852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.057574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.461098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.468847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.478135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.404506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.741618] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.748240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.755284] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.761882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.770794] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.797089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.479902] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.486543] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.495667] device bridge_slave_0 entered promiscuous mode [ 230.733394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.853749] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.860245] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.869071] device bridge_slave_1 entered promiscuous mode [ 231.223882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.230349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.238953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.252030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.628802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.624667] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.796133] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.151559] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.515577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.522823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.855376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.862653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:02:49 executing program 4: [ 235.010783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.021097] team0: Port device team_slave_0 added [ 235.428863] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.437077] team0: Port device team_slave_1 added [ 235.893601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.900782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.909777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.180216] IPVS: ftp: loaded support on port[0] = 21 [ 236.365864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.373193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.382130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.771922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.779564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.788892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.274259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.282400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.291351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.613445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.468437] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.055483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.061976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.069814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.254610] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.261096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.268103] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.274630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.283045] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.602594] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.132517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:02:58 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 243.649098] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.655809] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.664561] device bridge_slave_0 entered promiscuous mode [ 244.040216] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.046944] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.055298] device bridge_slave_1 entered promiscuous mode 06:02:59 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 244.536656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 244.888892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 06:03:00 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 246.020165] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.400388] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:03:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5f907000100020100028800028025000400", 0x24) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) [ 246.862260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.869399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.122080] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 247.175714] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 247.349061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.356453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:03:02 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabbfffbffffffff88a8"], &(0x7f0000000140)={0x0, 0x40000020, [0x0, 0x0, 0x7e7, 0xb4d]}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8003, 0x0) [ 247.479108] 8021q: adding VLAN 0 to HW filter on device bond0 06:03:03 executing program 0: r0 = memfd_create(&(0x7f0000000000)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x2000000600003) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x7ff, 0x4) r2 = dup2(r1, r0) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0xffffffff, 0x20) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd, @time={0x0, 0x989680}, {}, {}, @raw32}], 0x30) ioctl$FICLONE(r1, 0x40049409, r2) [ 248.096712] mmap: syz-executor0 (7101) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:03:03 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x7c9) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f00000000c0)=""/115, &(0x7f0000000140)=0x73) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x8, 0x8208, 0x10000, 0x3, 0x46, 0x81, 0x6, r2}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x3, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[{0x7, 0x9}, {0x3, 0x1}, {0x4, 0x9}, {0x8, 0x7ff}], 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='/dev/sequencer2\x00') r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x40000, 0x0) ioctl(r1, 0x10001, &(0x7f0000000400)="d9b5dc84a144fa81ba71952f9a66f33ecc64bdbdeed64825a1ebddef60ff192419a32f17ed2633df91f4") ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000440)={{0x3, 0x3, 0x2, 0x6, 'syz0\x00', 0x81}, 0x0, [0x9, 0x0, 0x101, 0x100, 0x4, 0x5, 0x80, 0x2f9e, 0x80000001, 0x43b, 0x4, 0x1000, 0x2, 0x8, 0x2bc, 0xf15, 0x9, 0x1, 0xffffffff, 0x81, 0x0, 0x8, 0x3506, 0xd200000000000000, 0x5f, 0x3, 0x100000000, 0x8, 0x6d, 0x2, 0xfffffffffffffffa, 0x3, 0xa4, 0x8, 0x8, 0x2, 0xd19, 0xfff, 0x81, 0x5, 0x16c, 0x7f, 0x80, 0x6, 0x4, 0x3f, 0x2, 0x5, 0x1, 0x2, 0xfffffffffffffffc, 0x1000, 0x2, 0x7f, 0xffffffff, 0x80, 0x8, 0x4, 0xb963, 0x8, 0x1ff, 0x1ff, 0x6, 0xffffffffffffffff, 0xa8f, 0x6, 0x7ff, 0x4954, 0x80000001, 0x81, 0x6, 0x7433, 0xedd, 0xfff, 0xd72a, 0x3, 0x10001, 0xffffffff, 0xedfd, 0x5, 0x3, 0x7, 0x80000000, 0xffffffffffffffff, 0x8, 0x1, 0xc2db, 0x21, 0x8, 0x8, 0x100000001, 0x80000001, 0x8, 0x2800000000, 0x2, 0x3, 0x1, 0x200, 0x0, 0x400000, 0x5, 0x1, 0x2, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x6, 0x200, 0x101, 0x9, 0x0, 0x0, 0xedc, 0x42fa, 0x5, 0x101, 0x5, 0x0, 0x7, 0x81, 0x200, 0x7fff, 0x4, 0x100000000, 0x7f, 0x1000], {0x77359400}}) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000980)=0x6, &(0x7f00000009c0)=0x4) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000a00)=""/217) r5 = getpgid(0x0) ptrace(0x10, r5) sendmsg$alg(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="44805d1ffc256c1cb48751d9aa6109a375961bb65489e9c199b80d7a0113d9abc74586b2bb8defd6900ae817a2365e2fc7b0350fe3bbeee3c81233c2", 0x3c}, {&(0x7f0000001b40)="2ded0c2977c4d609fd2e73128c261a659fd2dd9282a91b7ab2a22290afdaba29163f5e5409c7fc9457187488e6ad23011c09f29fcfb00819c80d1b5c554cc95439d90ed0bec5a8c42633194800820a1d5e61fe3b09b42d767474f861ec33b233b4fa4575134f9ce107f3042a7cb9bf17ba96954d2d31b8359b35bbb10cfbc8a34840a8f4ba107475b014e16a1ac255136fd1ae4b98a43de77d7e2d7776a01587b899247f2a91aaf0560c783218a28f86b4d6c8", 0xb3}, {&(0x7f0000001c00)="bbd83cbe0ba478a956218f97a0b2a510a2b2b7dfea61f63ba7e3c492ea42f62b4e3d9d9ca195f982eeb74e45d83fa98207aba6a478af3c15d53b970b25b032f849bc5a982a4131637c4353dd126244dae9e8ea17519d02f018f3109232ff7abb447727537fccd0d450c1dceb770f94386d6d3db7f26179bfccfce94bd89a950d9c9d056432e32574aef79d380cd8af097ff39af3b41b14816613e8d421ab44a7ae26522b073771652b3e52c0b14b34238f56563bcfef97ca83b9448fa3c59e3e3c7edd24dd40e05bee451de3ce704b", 0xcf}], 0x4, &(0x7f0000001d40)=[@iv={0xb0, 0x117, 0x2, 0x97, "29c06747d2ebdf10b64e226ccf1f52bcce9882839f835d5e7d840e7311569d8a2fc0e84de423278770e3d3d88ebda414e95f4b837b3ff9588cdde983a7bd0f3677673cd2ef9292fe385a56aee072f41bdde3cc1ba3f1629f5614ce4a343fc6cd1c4d91c169338f6180ff25912fddad6194b807909b94cc143b668683163138fceb6a369d671e55b4b6fea45164fab4f8d5cda052553890"}], 0xb0, 0x24040840}, 0x44000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001e40)={r3, 0x2}, 0x8) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001f80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001f40)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000001fc0)={0x6, 0x118, 0xfa00, {{0x0, 0x4, "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", 0x5f, 0x100000000, 0xacf, 0x81, 0xbcd0, 0x7f, 0x5, 0x1}, r7}}, 0x120) accept$inet6(r4, 0x0, &(0x7f0000002100)) utimensat(r1, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000021c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002200)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000002240)={r8, 0x9, 0x30}, &(0x7f0000002280)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000022c0)={r9, 0xfff}, &(0x7f0000002300)=0x8) 06:03:03 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x30, &(0x7f0000000000)={0x0, 0x0, 0x6fffe}) fchmodat(0xffffffffffffffff, &(0x7f0000004880)='./file0\x00', 0x0) rt_sigtimedwait(&(0x7f0000000200)={0x7fffffffffffff66}, &(0x7f0000a72ff0), &(0x7f0000a72000)={0x0, 0x1c9c380}, 0x8) [ 248.694600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.702928] team0: Port device team_slave_0 added [ 249.101407] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.110091] team0: Port device team_slave_1 added [ 249.127742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.488868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 249.496537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.506079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.618939] IPVS: ftp: loaded support on port[0] = 21 [ 249.841847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 249.849113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.858350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.215447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.223439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.232697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.519804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.526751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.535024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.613165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.620858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.630155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.921138] 8021q: adding VLAN 0 to HW filter on device team0 06:03:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x40000000000004}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 254.423601] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.430136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.437265] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.443845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.452484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.812019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.251411] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.258340] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.267068] device bridge_slave_0 entered promiscuous mode [ 255.548826] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.555707] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.564456] device bridge_slave_1 entered promiscuous mode [ 255.909753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.255379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.233531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.442809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.612332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.746758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 257.756691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.988054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.995638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.650887] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.708384] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.716812] team0: Port device team_slave_0 added [ 258.966948] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.975386] team0: Port device team_slave_1 added [ 259.235930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 259.244991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.254150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 06:03:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x0, 0x3ff, 0x0, 0x8, 0x1, 0x80}, 0x2c) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000007c0)="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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x82}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1600, 0x297ef) [ 259.594576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.603188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.612627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.860222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.866956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.875278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.938271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.946414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.955688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.239946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 260.249725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.258907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.026400] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.769441] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.776048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.783178] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.789664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.798891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.805833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.124900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.853175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 06:03:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 266.813590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.820172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.828330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.458520] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.100350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.657372] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 06:03:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="240000001f0000d303199add05a4c6e10000000000e10000"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 06:03:26 executing program 1: r0 = socket$inet(0x2, 0x802, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x0, @rand_addr}, 0x204, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 06:03:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x0, 0x3ff, 0x0, 0x8, 0x1, 0x80}, 0x2c) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000007c0)="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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x80, &(0x7f0000000040)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x82}, 0x2c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1600, 0x297ef) 06:03:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 06:03:26 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000bc0000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000000d00000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) 06:03:26 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="100100000000000000000000000000002b02af898d9982de33497f4d126dc1e90610a634d6447f7f99cabdf84ad268b999fa69dcac77fd1ebf75ed173721fdc176f75f08ef583db2520feed701866fe36915718ccd8c9ed92e1ad3058ef016"], 0x5f, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'bond0\x00', @random="01003a1e2410"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x28, &(0x7f00000000c0)}, 0x10) 06:03:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = epoll_create1(0x0) r3 = syz_open_pts(r1, 0x22400) dup3(r2, r1, 0x0) dup2(r2, r3) [ 271.694773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 271.701266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.709540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.362186] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.372964] QAT: Invalid ioctl [ 274.376751] QAT: Invalid ioctl [ 274.385171] QAT: Invalid ioctl [ 274.396582] QAT: Invalid ioctl [ 274.400043] QAT: Invalid ioctl [ 274.405896] QAT: Invalid ioctl 06:03:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) dup2(r0, r1) 06:03:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000380)="0a5c2d023c126285718070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) 06:03:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x28007d) sendfile(r2, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) pread64(r0, &(0x7f0000000300)=""/203, 0xcb, 0x0) 06:03:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = epoll_create1(0x0) r3 = syz_open_pts(r1, 0x22400) dup3(r2, r1, 0x0) dup2(r2, r3) 06:03:29 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000f40)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'bond0\x00', @random="01003a1e2410"}) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0xc8, 0x81, 0x0, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe67, 0x0, 0x7fa5, 0x0, 0x100000000, 0x0, @perf_config_ext={0x0, 0x37bb}, 0x0, 0x10000, 0x0, 0x0, 0x2ea7, 0x39a74eb3, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:03:29 executing program 4: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000dcfffe), 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x1000000, 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000), 0x0, &(0x7f0000000faf)=""/81, 0x51}, 0x41002106) [ 274.578175] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:03:29 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x1000000000000088) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f00000006c0), 0x361, &(0x7f0000000140)}}], 0x4000280, 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005700)={&(0x7f0000000100), 0xc, &(0x7f00000056c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) 06:03:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = epoll_create1(0x0) r3 = syz_open_pts(r1, 0x22400) dup3(r2, r1, 0x0) dup2(r2, r3) 06:03:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) 06:03:30 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000140)) 06:03:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") readv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/203, 0xcb}], 0x1) 06:03:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @rand_addr}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000000c0)=0x100000000000006) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xfb, 0x0, &(0x7f0000000140), 0x100000000000007f) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000016000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x7ffd}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:03:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = epoll_create1(0x0) r3 = syz_open_pts(r1, 0x22400) dup3(r2, r1, 0x0) dup2(r2, r3) 06:03:30 executing program 3: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0), 0xfffffffffffffd02) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_getevents(0x0, 0x8, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301ffff00000000000000000a000000"], 0x14}}, 0x0) [ 275.511965] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 275.672138] ================================================================== [ 275.679634] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 275.687325] CPU: 0 PID: 7916 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #65 [ 275.694540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.703925] Call Trace: [ 275.706547] dump_stack+0x306/0x460 [ 275.710223] ? vmx_set_constant_host_state+0x1778/0x1830 [ 275.715740] kmsan_report+0x1a2/0x2e0 [ 275.719583] __msan_warning+0x7c/0xe0 [ 275.723460] vmx_set_constant_host_state+0x1778/0x1830 [ 275.728807] vmx_create_vcpu+0x3e6f/0x7870 [ 275.733085] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.737965] ? __msan_poison_alloca+0x17a/0x210 [ 275.742727] ? vmx_vm_init+0x340/0x340 [ 275.746640] kvm_arch_vcpu_create+0x25d/0x2f0 [ 275.751171] kvm_vm_ioctl+0x13fd/0x33d0 [ 275.755184] ? __msan_poison_alloca+0x17a/0x210 [ 275.759888] ? do_vfs_ioctl+0x18a/0x2810 [ 275.763973] ? __se_sys_ioctl+0x1da/0x270 [ 275.768143] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 275.773010] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 275.777896] do_vfs_ioctl+0xcf3/0x2810 [ 275.781868] ? security_file_ioctl+0x92/0x200 [ 275.786447] __se_sys_ioctl+0x1da/0x270 [ 275.790457] __x64_sys_ioctl+0x4a/0x70 [ 275.794387] do_syscall_64+0xbe/0x100 [ 275.798217] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.803438] RIP: 0033:0x457579 [ 275.806650] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.825565] RSP: 002b:00007fad2f380c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.833301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 275.840586] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 275.847866] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.855153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad2f3816d4 [ 275.862444] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 275.869756] [ 275.871396] Local variable description: ----dt@vmx_set_constant_host_state [ 275.878436] Variable was created at: [ 275.882182] vmx_set_constant_host_state+0x2b0/0x1830 [ 275.887396] vmx_create_vcpu+0x3e6f/0x7870 [ 275.891648] ================================================================== [ 275.899022] Disabling lock debugging due to kernel taint [ 275.904503] Kernel panic - not syncing: panic_on_warn set ... [ 275.904503] [ 275.911905] CPU: 0 PID: 7916 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #65 [ 275.920504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.929874] Call Trace: [ 275.932525] dump_stack+0x306/0x460 [ 275.936397] panic+0x54c/0xafa [ 275.939660] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 275.945146] kmsan_report+0x2d3/0x2e0 [ 275.949021] __msan_warning+0x7c/0xe0 [ 275.952881] vmx_set_constant_host_state+0x1778/0x1830 [ 275.958211] vmx_create_vcpu+0x3e6f/0x7870 [ 275.962489] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.967361] ? __msan_poison_alloca+0x17a/0x210 [ 275.972080] ? vmx_vm_init+0x340/0x340 [ 275.975999] kvm_arch_vcpu_create+0x25d/0x2f0 [ 275.980545] kvm_vm_ioctl+0x13fd/0x33d0 [ 275.984583] ? __msan_poison_alloca+0x17a/0x210 [ 275.989310] ? do_vfs_ioctl+0x18a/0x2810 [ 275.993405] ? __se_sys_ioctl+0x1da/0x270 [ 275.997592] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 276.002477] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 276.007416] do_vfs_ioctl+0xcf3/0x2810 [ 276.011364] ? security_file_ioctl+0x92/0x200 [ 276.015909] __se_sys_ioctl+0x1da/0x270 [ 276.019947] __x64_sys_ioctl+0x4a/0x70 [ 276.023869] do_syscall_64+0xbe/0x100 [ 276.027722] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 276.032931] RIP: 0033:0x457579 [ 276.036161] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.055121] RSP: 002b:00007fad2f380c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.062870] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 276.070336] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 276.077625] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 276.084915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad2f3816d4 [ 276.092199] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 276.100583] Kernel Offset: disabled [ 276.104257] Rebooting in 86400 seconds..