[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.817674] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.863722] random: sshd: uninitialized urandom read (32 bytes read) [ 34.384182] random: sshd: uninitialized urandom read (32 bytes read) [ 35.685813] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. [ 41.318786] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/04 23:41:14 fuzzer started 2018/06/04 23:41:15 dialing manager at 10.128.0.26:45299 [ 64.951714] can: request_module (can-proto-0) failed. [ 64.962790] can: request_module (can-proto-0) failed. 2018/06/04 23:41:39 kcov=true, comps=false 2018/06/04 23:41:45 executing program 0: 2018/06/04 23:41:45 executing program 1: 2018/06/04 23:41:45 executing program 7: 2018/06/04 23:41:45 executing program 4: 2018/06/04 23:41:45 executing program 5: 2018/06/04 23:41:45 executing program 2: 2018/06/04 23:41:45 executing program 6: 2018/06/04 23:41:45 executing program 3: [ 73.535343] IPVS: ftp: loaded support on port[0] = 21 [ 73.660643] IPVS: ftp: loaded support on port[0] = 21 [ 73.700519] IPVS: ftp: loaded support on port[0] = 21 [ 73.745856] IPVS: ftp: loaded support on port[0] = 21 [ 73.753663] IPVS: ftp: loaded support on port[0] = 21 [ 73.761006] IPVS: ftp: loaded support on port[0] = 21 [ 73.776200] IPVS: ftp: loaded support on port[0] = 21 [ 73.810517] IPVS: ftp: loaded support on port[0] = 21 [ 75.670519] ip (4678) used greatest stack depth: 54520 bytes left [ 75.927969] ip (4700) used greatest stack depth: 54392 bytes left [ 76.135456] ip (4716) used greatest stack depth: 54056 bytes left [ 77.008147] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.014662] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.028380] device bridge_slave_0 entered promiscuous mode [ 77.064525] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.071090] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.105199] device bridge_slave_0 entered promiscuous mode [ 77.159276] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.165796] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.209096] device bridge_slave_0 entered promiscuous mode [ 77.252823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.259347] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.295274] device bridge_slave_0 entered promiscuous mode [ 77.311473] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.317982] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.325471] device bridge_slave_0 entered promiscuous mode [ 77.334021] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.340511] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.360890] device bridge_slave_1 entered promiscuous mode [ 77.378651] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.385115] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.397937] device bridge_slave_0 entered promiscuous mode [ 77.408922] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.415403] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.437598] device bridge_slave_0 entered promiscuous mode [ 77.452588] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.459130] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.467692] device bridge_slave_1 entered promiscuous mode [ 77.474722] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.481137] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.488691] device bridge_slave_1 entered promiscuous mode [ 77.496696] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.503198] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.533368] device bridge_slave_0 entered promiscuous mode [ 77.560569] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.567089] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.586197] device bridge_slave_1 entered promiscuous mode [ 77.602393] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.608921] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.625310] device bridge_slave_1 entered promiscuous mode [ 77.641522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.651359] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.657810] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.666446] device bridge_slave_1 entered promiscuous mode [ 77.674766] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.681227] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.707206] device bridge_slave_1 entered promiscuous mode [ 77.721966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.732091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.742770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.749305] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.794280] device bridge_slave_1 entered promiscuous mode [ 77.814617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.832684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.842739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.855952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.913532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.924697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 77.954159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.974890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.035929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.055912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.115146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.142412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.275796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.415798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.576245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.634730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.648918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.669779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.691619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.753365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.773795] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.807008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.853490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.893441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.941146] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.960348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.971221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.013309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.020480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.055927] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.080716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.090587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.114842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.121901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.150365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.159569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.179394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.186495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.211226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.228928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.262992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.271862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.279644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.337121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.344528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.363175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.400649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.425004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.438273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.448069] ip (4951) used greatest stack depth: 53752 bytes left [ 79.481723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.489485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.514417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.521561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.564458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.572592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.604092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.611182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.768980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.801865] team0: Port device team_slave_0 added [ 79.844469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 79.852572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.896744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.915966] team0: Port device team_slave_0 added [ 80.005006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.035670] team0: Port device team_slave_1 added [ 80.116147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.135065] team0: Port device team_slave_0 added [ 80.150230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.163678] team0: Port device team_slave_1 added [ 80.186102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.204146] team0: Port device team_slave_0 added [ 80.222174] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.238939] team0: Port device team_slave_0 added [ 80.252227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.266954] team0: Port device team_slave_0 added [ 80.285260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.294230] team0: Port device team_slave_0 added [ 80.321860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.339749] team0: Port device team_slave_1 added [ 80.356530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.363569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.381571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.414980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.423839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.435863] team0: Port device team_slave_1 added [ 80.458631] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.480855] team0: Port device team_slave_1 added [ 80.490541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.507970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.535066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 80.547907] team0: Port device team_slave_0 added [ 80.577193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.590130] team0: Port device team_slave_1 added [ 80.598061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.610339] team0: Port device team_slave_1 added [ 80.615938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.651506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.664933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.686731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.693754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.713684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.725720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.734523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.746533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.758015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.782755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.802206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.820675] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.829068] team0: Port device team_slave_1 added [ 80.838274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.846962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.860426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.870739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.890828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.902928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.926205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.945653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.960415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.973463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.982931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.992563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.011276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.020992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.034939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.056149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.069584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.084961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.096539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.104433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.124215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.131659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.139708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.155256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.173802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.190875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.203979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.219421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.231753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.244145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.255228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.262719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.269706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.278756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.287366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.301057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.331502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.343543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.360354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.374012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.385335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.396867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.404258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.425488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.455661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.472200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.487620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.496090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.509258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.516861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.525188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.547009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.574838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.591866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.606561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.622622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.630801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.639415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.653812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.677797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.697947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.712296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.744591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.779869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.796809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.817917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.827415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.835171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.843850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.861849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.886692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.896838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.914090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.923700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.940981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.975389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.005335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.029018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.785935] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.792412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.799266] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.805718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.842648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.849374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.884684] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.891142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.897943] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.904386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.941831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.134701] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.141165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.147954] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.154376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.194624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.207771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.214214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.220971] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.227373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.242881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.259102] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.265523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.272274] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.278697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.287614] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.311334] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.317789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.324558] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.330992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.385163] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.392351] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.398787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.405556] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.411986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.428012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.435301] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.441700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.448416] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.454811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.471085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.897144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.905278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.935006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.967362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.977992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.991531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.002480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.398845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.648644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.842591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.900097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.958836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.052610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.078421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.131591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.177323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.523941] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.631767] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.758593] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.809906] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.852390] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.870936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.000733] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.018960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.025308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.037180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.272520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.278922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.291914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.543278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.549658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.566730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.611464] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.622154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.635387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.670880] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.677275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.691142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.727541] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.739846] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.746335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.772744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.800148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.824244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.864453] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 94.875947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.884457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.979558] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.182276] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.472264] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.499185] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.534707] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.568934] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.586608] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.639555] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/04 23:42:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) creat(&(0x7f0000000180)='./file0/file1\x00', 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/16, 0x10) [ 99.894813] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 2018/06/04 23:42:13 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[]}, 0x78) unshare(0x40000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xffffffffffffff8b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1f14, 0x4) [ 100.119321] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 23:42:13 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) write$sndseq(r0, &(0x7f0000000240), 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/04 23:42:13 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) 2018/06/04 23:42:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000500)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/162, 0xa2, 0x400}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1, &(0x7f0000000880)=""/41, 0x29, 0x7}, 0x966}, {{&(0x7f00000008c0)=@sco, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/17, 0x11}, {&(0x7f0000000a80)=""/26, 0x1a}, {&(0x7f0000000ac0)=""/79, 0x4f}, {&(0x7f0000000b40)=""/5, 0x5}], 0x4, &(0x7f0000000c00)=""/188, 0xbc, 0x5}, 0x9}, {{&(0x7f0000000cc0)=@nl=@proc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/38, 0x26}, {&(0x7f0000000e40)=""/221, 0xdd}, {&(0x7f0000000f40)=""/170, 0xaa}, {&(0x7f0000001080)=""/196, 0xc4}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/83, 0x53}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x7, &(0x7f00000024c0)=""/4096, 0x1000, 0x1}, 0x9}, {{&(0x7f00000036c0)=@ipx, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003740)=""/169, 0xa9}, {&(0x7f0000003800)=""/11, 0xb}, {&(0x7f0000003840)=""/37, 0x25}, {&(0x7f0000003880)=""/147, 0x93}, {&(0x7f0000003940)=""/83, 0x53}], 0x5}, 0x2}, {{&(0x7f0000003a40)=@l2, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003ac0)=""/255, 0xff}, {&(0x7f0000003bc0)=""/106, 0x6a}, {&(0x7f0000003c40)=""/83, 0x53}], 0x3, 0x0, 0x0, 0x100}, 0x6583}, {{&(0x7f0000003d00)=@nfc_llcp, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d80)=""/141, 0x8d}, {&(0x7f0000003e40)=""/247, 0xf7}, {&(0x7f0000003f40)=""/50, 0x32}], 0x3, &(0x7f0000003fc0)=""/65, 0x41, 0xffffffff}, 0x7ff}], 0x7, 0x0, &(0x7f0000004240)={0x0, 0x989680}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004280)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x7}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x6e6bb1, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000), 0xff8f) [ 100.397252] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 23:42:13 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x4, @loopback={0x0, 0x1}}, 0xfffffffc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)="8decfe1cca9ef750816d164770118e69d1cf331d7ef042abff", 0x19}], 0x1}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 2018/06/04 23:42:13 executing program 1: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x80}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 2018/06/04 23:42:13 executing program 3: syz_emit_ethernet(0xe5f, &(0x7f0000000280)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "1b3cc1", 0xe29, 0x33, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, {[@hopopts={0x0, 0x185, [], [@generic={0x0, 0xc27, "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"}]}], @icmpv6=@dest_unreach={0x1, 0x7, 0x0, 0x100000000, [], {0x8, 0x6, "d9ceef", 0x1000, 0x73, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [@srh={0x87, 0x6, 0x4, 0x3, 0x7, 0x5a, 0x7fffffff, [@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}]}, @dstopts={0x0, 0x6, [], [@enc_lim={0x4, 0x1, 0xfffffffffffffbff}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xaa}}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x40}, @pad1={0x0, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1f}}]}, @fragment={0x8f, 0x0, 0x39, 0x2, 0x0, 0x2, 0x64}, @fragment={0x7e, 0x0, 0x400, 0x4, 0x0, 0x3c09, 0x67}, @dstopts={0xbf, 0x2, [], [@pad1={0x0, 0x1}, @hao={0xc9, 0x10}]}, @routing={0x5e, 0x6, 0x1, 0x9, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @empty, @mcast1={0xff, 0x1, [], 0x1}]}, @routing={0x7b, 0x10, 0x1, 0x7ff, 0x0, [@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @dev={0xfe, 0x80, [], 0x1d}, @empty]}], "c8eb1ac31efbc5cba67f3968cdd0f9907b7599b7092c6ff45d507e77b7fb1e6957d73a436cf084d5a366d0410931eaced40f6ce789208ffacc549dc744d7f0e99e5ac2b2112413c1268f6b0e6600e3696aaf85b6ce5d9f2e9e"}}}}}}}, 0x0) 2018/06/04 23:42:14 executing program 0: 2018/06/04 23:42:14 executing program 5: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[]}, 0x78) unshare(0x40000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xffffffffffffff8b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1f14, 0x4) 2018/06/04 23:42:14 executing program 3: 2018/06/04 23:42:14 executing program 4: 2018/06/04 23:42:14 executing program 6: 2018/06/04 23:42:14 executing program 1: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x80}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 2018/06/04 23:42:14 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, &(0x7f0000000000)=""/6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x3a}}) 2018/06/04 23:42:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000100)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="003c445483d38368c479af26938a1ddc286f2fc9fd0190ed56bae6d834365886a08402"], &(0x7f0000001180)=0x2) 2018/06/04 23:42:14 executing program 6: [ 101.505487] device lo entered promiscuous mode [ 101.510386] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 23:42:14 executing program 4: 2018/06/04 23:42:14 executing program 3: [ 102.281463] device lo left promiscuous mode 2018/06/04 23:42:15 executing program 0: 2018/06/04 23:42:15 executing program 6: 2018/06/04 23:42:15 executing program 2: 2018/06/04 23:42:15 executing program 4: 2018/06/04 23:42:15 executing program 3: 2018/06/04 23:42:15 executing program 1: 2018/06/04 23:42:15 executing program 7: 2018/06/04 23:42:15 executing program 5: [ 102.397867] device lo entered promiscuous mode [ 102.407285] device lo left promiscuous mode 2018/06/04 23:42:15 executing program 3: 2018/06/04 23:42:15 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0xffe, 0x0) 2018/06/04 23:42:15 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) 2018/06/04 23:42:15 executing program 1: 2018/06/04 23:42:15 executing program 2: 2018/06/04 23:42:15 executing program 6: 2018/06/04 23:42:15 executing program 5: 2018/06/04 23:42:15 executing program 7: 2018/06/04 23:42:15 executing program 3: 2018/06/04 23:42:15 executing program 4: 2018/06/04 23:42:15 executing program 0: 2018/06/04 23:42:16 executing program 2: 2018/06/04 23:42:16 executing program 7: 2018/06/04 23:42:16 executing program 1: 2018/06/04 23:42:16 executing program 4: 2018/06/04 23:42:16 executing program 3: 2018/06/04 23:42:16 executing program 5: 2018/06/04 23:42:16 executing program 6: 2018/06/04 23:42:16 executing program 0: 2018/06/04 23:42:16 executing program 2: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x4}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x8}], 0x2c) ioctl(r1, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 2018/06/04 23:42:16 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x20040) r2 = userfaultfd(0x0) close(r2) clone(0x0, &(0x7f0000001f37), &(0x7f0000000280), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet(0x10, 0xa, 0xe2f) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010607041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 2018/06/04 23:42:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)) close(r0) 2018/06/04 23:42:16 executing program 5: unshare(0x40000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/04 23:42:16 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f00000000c0)="1abd28c7602c53be8efb3f4163d9cdfba9ce211d5e1da4692c9c0c3c6768a0bb5125d0b5e581a0166d0c4723bacb444df18d866c9fe29ebc2420e65145592af07ac329ac4911246dc2a857beb851d7e5ca1c4d43c597770fab13c3e1652eaacf2fe932fcf847c26d8021c477095d073add8b94cf74456a6c9259022b81f8dffc1c661e8f368325ff1c777e03a160ef116d052cbd726aec8c5c57c46662dc18269b8d138cb72fe7cc53ae72360c190bfad080402879f9f0832ec346d296a9149394089de6199218", 0xc7) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x41d7, 0x7, 0x4, 0xfffffffffffffffb}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x1d, @rand_addr, 0x4e24, 0x3, 'lblcr\x00', 0x8, 0x4, 0x17}, 0x2c) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) 2018/06/04 23:42:16 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"6966623000000000020000383fdc3200", 0x801}) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x10332, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/04 23:42:16 executing program 2: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x4}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x8}], 0x2c) ioctl(r1, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$binfmt_aout(r0, &(0x7f0000000000), 0xff8f) 2018/06/04 23:42:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100), 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe2, 0x10000) connect$vsock_dgram(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 2018/06/04 23:42:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 103.629229] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 23:42:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="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") getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x401, 0x2, [0x7, 0x20]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x8000, 0x3, 0x4, r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000140)={0x80, 0x5, 0x4}) 2018/06/04 23:42:16 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000480)={0x4, &(0x7f0000000040)=""/145, &(0x7f0000000400)=[{0x5d5, 0xb1, 0x4, &(0x7f0000000100)=""/177}, {0x3f, 0xff, 0x1, &(0x7f00000001c0)=""/255}, {0xffffffff, 0x2d, 0x4, &(0x7f00000002c0)=""/45}, {0x4, 0xd3, 0x2, &(0x7f0000000300)=""/211}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f00000ebffc)=0x8) 2018/06/04 23:42:16 executing program 0: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r1) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x103}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) readlinkat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/53, 0x35) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/06/04 23:42:16 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="484f062c866b2a69b295f820d3bcec91", 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf32(r1, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x292, 0x38, 0x0, 0x6, 0x0, 0x20}, [{0x70000000, 0x0, 0x80}]}, 0x58) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1) [ 103.960147] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 23:42:17 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) r1 = getpid() prctl$setptracer(0x59616d61, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0xd38, 0x7fffffff, 0x8001, 0x184000, 0x2, 0x8000, 0xffffffffffffff1a, 0x6, 0x4, 0x3, 0x8, 0x8000}) r3 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) getsockopt(r3, 0x114, 0x2715, &(0x7f00000002c0)=""/13, &(0x7f0000000040)=0xd) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) [ 104.397391] ================================================================== [ 104.405164] BUG: KMSAN: uninit-value in _copy_to_iter+0x45f/0x2800 [ 104.411509] CPU: 0 PID: 6720 Comm: syz-executor3 Not tainted 4.17.0-rc5+ #103 [ 104.418780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.428139] Call Trace: [ 104.430731] dump_stack+0x185/0x1d0 [ 104.434361] ? kmsan_internal_check_memory+0x116/0x1e0 [ 104.439648] kmsan_report+0x149/0x260 [ 104.443461] kmsan_internal_check_memory+0x135/0x1e0 [ 104.448571] kmsan_copy_to_user+0x75/0x160 [ 104.452811] ? _copy_to_iter+0x92/0x2800 [ 104.456877] _copy_to_iter+0x45f/0x2800 [ 104.460857] ? finish_wait+0x10a/0x3e0 [ 104.464756] vhost_chr_read_iter+0x7b3/0xc30 [ 104.469165] ? init_wait_entry+0x1a0/0x1a0 [ 104.473411] vhost_net_chr_read_iter+0xf6/0x130 [ 104.478102] ? vhost_net_exit+0x30/0x30 [ 104.482079] do_iter_readv_writev+0x84d/0xa00 [ 104.486580] ? vhost_net_exit+0x30/0x30 [ 104.490553] do_iter_read+0x303/0xd70 [ 104.494353] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 104.499813] do_readv+0x295/0x5f0 [ 104.503277] __x64_sys_readv+0xe1/0x120 [ 104.507251] do_syscall_64+0x152/0x230 [ 104.511139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.516324] RIP: 0033:0x455a09 [ 104.519509] RSP: 002b:00007f47d6445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 104.527218] RAX: ffffffffffffffda RBX: 00007f47d64466d4 RCX: 0000000000455a09 [ 104.534487] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 104.541756] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 104.549030] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 104.556325] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 104.563594] [ 104.565212] Uninit was created at: [ 104.568759] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 104.573867] kmsan_kmalloc+0x94/0x100 [ 104.577662] __kmalloc+0x141/0x350 [ 104.581205] translate_desc+0xbef/0x1120 [ 104.585265] vhost_update_used_flags+0x469/0x8d0 [ 104.590027] vhost_vq_init_access+0x173/0xa20 [ 104.594527] vhost_net_ioctl+0x2212/0x3450 [ 104.598762] do_vfs_ioctl+0xaf8/0x2410 [ 104.602648] __x64_sys_ioctl+0x280/0x320 [ 104.606703] do_syscall_64+0x152/0x230 [ 104.610590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.615770] [ 104.617396] Bytes 4-7 of 72 are uninitialized [ 104.621904] Memory access starts at ffff88013ac7c960 [ 104.627006] ================================================================== [ 104.635661] Disabling lock debugging due to kernel taint [ 104.641102] Kernel panic - not syncing: panic_on_warn set ... [ 104.641102] [ 104.648459] CPU: 0 PID: 6720 Comm: syz-executor3 Tainted: G B 4.17.0-rc5+ #103 [ 104.657102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.666612] Call Trace: [ 104.669190] dump_stack+0x185/0x1d0 [ 104.672894] panic+0x39d/0x940 [ 104.676108] ? kmsan_internal_check_memory+0x116/0x1e0 [ 104.681369] kmsan_report+0x260/0x260 [ 104.685159] kmsan_internal_check_memory+0x135/0x1e0 [ 104.690251] kmsan_copy_to_user+0x75/0x160 [ 104.694467] ? _copy_to_iter+0x92/0x2800 [ 104.698512] _copy_to_iter+0x45f/0x2800 [ 104.702469] ? finish_wait+0x10a/0x3e0 [ 104.706350] vhost_chr_read_iter+0x7b3/0xc30 [ 104.710745] ? init_wait_entry+0x1a0/0x1a0 [ 104.714973] vhost_net_chr_read_iter+0xf6/0x130 [ 104.719627] ? vhost_net_exit+0x30/0x30 [ 104.723590] do_iter_readv_writev+0x84d/0xa00 [ 104.728078] ? vhost_net_exit+0x30/0x30 [ 104.732043] do_iter_read+0x303/0xd70 [ 104.736192] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 104.741663] do_readv+0x295/0x5f0 [ 104.745115] __x64_sys_readv+0xe1/0x120 [ 104.749165] do_syscall_64+0x152/0x230 [ 104.753046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.758218] RIP: 0033:0x455a09 [ 104.761389] RSP: 002b:00007f47d6445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 104.769080] RAX: ffffffffffffffda RBX: 00007f47d64466d4 RCX: 0000000000455a09 [ 104.776334] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 104.783586] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 104.790847] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 104.798099] R13: 000000000000056b R14: 00000000006fd2a8 R15: 0000000000000000 [ 104.805766] Dumping ftrace buffer: [ 104.809305] (ftrace buffer empty) [ 104.812992] Kernel Offset: disabled [ 104.816597] Rebooting in 86400 seconds..