[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.603797] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.300335] random: sshd: uninitialized urandom read (32 bytes read) [ 28.687968] random: sshd: uninitialized urandom read (32 bytes read) [ 29.446491] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.26' (ECDSA) to the list of known hosts. [ 35.054789] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/11 04:17:22 fuzzer started [ 36.546272] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/11 04:17:25 dialing manager at 10.128.0.26:33083 2018/09/11 04:17:25 syscalls: 1 2018/09/11 04:17:25 code coverage: enabled 2018/09/11 04:17:25 comparison tracing: enabled 2018/09/11 04:17:25 setuid sandbox: enabled 2018/09/11 04:17:25 namespace sandbox: enabled 2018/09/11 04:17:25 fault injection: enabled 2018/09/11 04:17:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/11 04:17:25 net packed injection: enabled 2018/09/11 04:17:25 net device setup: enabled [ 39.115952] random: crng init done 04:19:16 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x10001, 0x0, 0x0, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 04:19:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xfd00, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[0xffffffffffffffff], [], @multicast2}}, 0x1c) 04:19:16 executing program 5: getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socket(0x40000000015, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r0, &(0x7f00000000c0), 0xdd) getcwd(&(0x7f0000000180)=""/118, 0x76) unshare(0x0) 04:19:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000200)=""/218, &(0x7f00000000c0)=0xda) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='/dev/audio\x00'}, 0x10) ftruncate(r1, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) 04:19:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 04:19:16 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getgroups(0x3dccbbae8b233e25, &(0x7f0000000040)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0xb) [ 149.281549] IPVS: ftp: loaded support on port[0] = 21 [ 149.288710] IPVS: ftp: loaded support on port[0] = 21 [ 149.309582] IPVS: ftp: loaded support on port[0] = 21 [ 149.311403] IPVS: ftp: loaded support on port[0] = 21 [ 149.321282] IPVS: ftp: loaded support on port[0] = 21 [ 149.368779] IPVS: ftp: loaded support on port[0] = 21 [ 151.471747] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.494319] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.502003] device bridge_slave_0 entered promiscuous mode [ 151.578622] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.591591] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.609097] device bridge_slave_0 entered promiscuous mode [ 151.619980] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.635628] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.650311] device bridge_slave_1 entered promiscuous mode [ 151.667033] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.675841] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.684169] device bridge_slave_0 entered promiscuous mode [ 151.701545] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.716931] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.725294] device bridge_slave_0 entered promiscuous mode [ 151.732384] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.741604] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.755661] device bridge_slave_0 entered promiscuous mode [ 151.762695] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.771318] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.786973] device bridge_slave_0 entered promiscuous mode [ 151.796152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.806285] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.812644] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.820142] device bridge_slave_1 entered promiscuous mode [ 151.832616] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.839696] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.866410] device bridge_slave_1 entered promiscuous mode [ 151.872929] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.887958] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.905656] device bridge_slave_1 entered promiscuous mode [ 151.913357] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.921687] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.930508] device bridge_slave_1 entered promiscuous mode [ 151.940456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.951442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.970072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.986158] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.992521] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.014559] device bridge_slave_1 entered promiscuous mode [ 152.040526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.055488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.076704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.104522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.136144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.145836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.243723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.281196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.418480] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.456096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.481946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.527860] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.562945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.618520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.636955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.660119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.678752] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.727270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.794762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.876048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 153.045308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 153.052212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.067656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.096238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.210238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.244802] team0: Port device team_slave_0 added [ 153.259610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 153.269823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.286314] team0: Port device team_slave_0 added [ 153.291399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.327841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.345199] team0: Port device team_slave_0 added [ 153.351371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.364483] team0: Port device team_slave_0 added [ 153.369785] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.384290] team0: Port device team_slave_1 added [ 153.417136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.434340] team0: Port device team_slave_1 added [ 153.442221] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.454510] team0: Port device team_slave_1 added [ 153.461417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.484768] team0: Port device team_slave_0 added [ 153.496310] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.517773] team0: Port device team_slave_1 added [ 153.525986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.535241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.554779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.574529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.584717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.605781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.619197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.644771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.668751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.680653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.687854] team0: Port device team_slave_1 added [ 153.707448] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.715107] team0: Port device team_slave_0 added [ 153.722551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.734443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.774098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.804821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.834423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.841942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.864416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.879313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.887666] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.896036] team0: Port device team_slave_1 added [ 153.915656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.925860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.935383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.943265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.959397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.984122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.992148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.002522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.016426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.024830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.036093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.044295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.054201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.074140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.082225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.094890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 154.104342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.111588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.124598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.164349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.172288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.190761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.198807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.206509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.214467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.229515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.248644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 154.274643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.282879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.334153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.342074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.352605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.369311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.384422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.420658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.430574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.452326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.478017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.494087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.512832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.560317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.581502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.601887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.547446] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.554155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.561134] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.567574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.601980] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.626043] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.632443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.639169] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.645574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.659441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.666904] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.673291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.680066] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.686486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.695796] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.819608] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.826057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.832738] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.839202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.857433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.885592] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.892022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.898772] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.905184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.947192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.067152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.082924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.097495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.106533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.114518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.127676] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.134142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.140842] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.147313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.157676] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 157.133938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.774430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.836179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.904557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.992621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.025588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.145986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.207229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.330921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.416169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.485377] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.500175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.620917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.684653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.690839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.704245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.790842] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.811367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.820803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.894764] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.900981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.914192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.955388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.978643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.004607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.026260] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.032500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.064557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.093362] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.113711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.123426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.259394] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.326146] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.418312] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.454196] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.513871] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.606098] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.168904] ================================================================== [ 165.176468] BUG: KASAN: use-after-free in sock_i_ino+0x94/0xa0 [ 165.182457] Read of size 8 at addr ffff8801ca5f80f0 by task syz-executor0/6865 [ 165.189817] [ 165.191460] CPU: 1 PID: 6865 Comm: syz-executor0 Not tainted 4.19.0-rc3+ #134 [ 165.198741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.208098] Call Trace: [ 165.210695] dump_stack+0x1c4/0x2b4 [ 165.214332] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.219535] ? printk+0xa7/0xcf [ 165.222831] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 165.227618] print_address_description.cold.8+0x9/0x1ff [ 165.233003] kasan_report.cold.9+0x242/0x309 [ 165.237432] ? sock_i_ino+0x94/0xa0 [ 165.241075] __asan_report_load8_noabort+0x14/0x20 [ 165.246019] sock_i_ino+0x94/0xa0 [ 165.249489] tipc_sk_fill_sock_diag+0x39c/0xd90 [ 165.254168] ? tipc_diag_dump+0x30/0x30 [ 165.258156] ? tipc_getname+0x7f0/0x7f0 [ 165.262159] ? graph_lock+0x170/0x170 [ 165.265970] ? __lock_sock+0x203/0x350 [ 165.269886] ? find_held_lock+0x36/0x1c0 [ 165.273966] ? mark_held_locks+0xc7/0x130 [ 165.278125] ? __local_bh_enable_ip+0x160/0x260 [ 165.282802] ? __local_bh_enable_ip+0x160/0x260 [ 165.287487] ? lockdep_hardirqs_on+0x421/0x5c0 [ 165.292085] ? trace_hardirqs_on+0xbd/0x310 [ 165.296425] ? lock_release+0x970/0x970 [ 165.300418] ? lock_sock_nested+0xe2/0x120 [ 165.304671] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 165.309701] ? skb_put+0x17b/0x1e0 [ 165.313258] ? memset+0x31/0x40 [ 165.316552] ? __nlmsg_put+0x14c/0x1b0 [ 165.320482] __tipc_add_sock_diag+0x233/0x360 [ 165.324995] tipc_nl_sk_walk+0x122/0x1d0 [ 165.329082] ? tipc_sock_diag_handler_dump+0x3d0/0x3d0 [ 165.334370] tipc_diag_dump+0x24/0x30 [ 165.338208] netlink_dump+0x519/0xd50 [ 165.342025] ? netlink_broadcast+0x50/0x50 [ 165.346278] __netlink_dump_start+0x4f1/0x6f0 [ 165.350796] ? tipc_data_ready+0x3e0/0x3e0 [ 165.355051] tipc_sock_diag_handler_dump+0x28e/0x3d0 [ 165.360167] ? __tipc_diag_gen_cookie+0xc0/0xc0 [ 165.364841] ? tipc_data_ready+0x3e0/0x3e0 04:19:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x1}, [{}], {}, [{}], {}, {0x20, 0x4}}, 0x34, 0x0) [ 165.364860] ? tipc_unregister_sysctl+0x20/0x20 [ 165.364873] ? tipc_ioctl+0x3a0/0x3a0 [ 165.364904] ? netlink_deliver_tap+0x355/0xf80 [ 165.364926] sock_diag_rcv_msg+0x31d/0x410 [ 165.364947] netlink_rcv_skb+0x172/0x440 [ 165.364962] ? sock_diag_bind+0x80/0x80 [ 165.364982] ? netlink_ack+0xb80/0xb80 [ 165.365009] sock_diag_rcv+0x2a/0x40 [ 165.402225] netlink_unicast+0x5a5/0x760 [ 165.406312] ? netlink_attachskb+0x9a0/0x9a0 [ 165.410737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.416302] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 165.421332] netlink_sendmsg+0xa18/0xfc0 [ 165.425404] ? move_addr_to_kernel.part.18+0xc6/0x100 [ 165.430609] ? netlink_unicast+0x760/0x760 [ 165.434846] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 165.439789] ? apparmor_socket_sendmsg+0x29/0x30 [ 165.444551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.450090] ? security_socket_sendmsg+0x94/0xc0 [ 165.454847] ? netlink_unicast+0x760/0x760 [ 165.459094] sock_sendmsg+0xd5/0x120 [ 165.462813] ___sys_sendmsg+0x7fd/0x930 [ 165.466792] ? __local_bh_enable_ip+0x160/0x260 [ 165.471469] ? copy_msghdr_from_user+0x580/0x580 [ 165.476230] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 165.481949] ? release_sock+0x1ec/0x2c0 [ 165.485935] ? __fget_light+0x2e9/0x430 [ 165.489921] ? fget_raw+0x20/0x20 [ 165.493377] ? __release_sock+0x3a0/0x3a0 [ 165.497536] ? tipc_nametbl_build_group+0x273/0x360 [ 165.502567] ? tipc_setsockopt+0x726/0xd70 [ 165.506812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.512353] ? sockfd_lookup_light+0xc5/0x160 [ 165.516870] __sys_sendmsg+0x11d/0x280 [ 165.520774] ? __ia32_sys_shutdown+0x80/0x80 [ 165.525199] ? do_fast_syscall_32+0x150/0xfb2 [ 165.529697] ? do_fast_syscall_32+0x150/0xfb2 [ 165.534208] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 165.539670] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 165.544434] do_fast_syscall_32+0x34d/0xfb2 [ 165.548762] ? do_int80_syscall_32+0x890/0x890 [ 165.553351] ? entry_SYSENTER_compat+0x68/0x7f [ 165.557941] ? trace_hardirqs_off_caller+0xbb/0x310 [ 165.562961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.567805] ? trace_hardirqs_on_caller+0x310/0x310 [ 165.572828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 165.577848] ? recalc_sigpending_tsk+0x180/0x180 [ 165.582616] ? kasan_check_write+0x14/0x20 [ 165.586862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.591724] entry_SYSENTER_compat+0x70/0x7f [ 165.596136] RIP: 0023:0xf7f35ca9 [ 165.599507] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.618886] RSP: 002b:00000000f5f310cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 165.626617] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 165.633896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.641167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.648453] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 165.655739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.663021] [ 165.664644] Allocated by task 6865: [ 165.668285] save_stack+0x43/0xd0 [ 165.671733] kasan_kmalloc+0xc7/0xe0 [ 165.675447] kasan_slab_alloc+0x12/0x20 [ 165.679421] kmem_cache_alloc+0x12e/0x730 [ 165.683568] sock_alloc_inode+0x1d/0x260 [ 165.687628] alloc_inode+0x63/0x190 [ 165.691252] new_inode_pseudo+0x71/0x1a0 [ 165.695310] sock_alloc+0x41/0x270 [ 165.698847] __sock_create+0x175/0x930 [ 165.702740] __sys_socket+0x106/0x260 [ 165.706544] __ia32_sys_socket+0x73/0xb0 [ 165.710619] do_fast_syscall_32+0x34d/0xfb2 [ 165.714946] entry_SYSENTER_compat+0x70/0x7f [ 165.719349] [ 165.720987] Freed by task 6864: [ 165.724265] save_stack+0x43/0xd0 [ 165.727717] __kasan_slab_free+0x102/0x150 [ 165.731948] kasan_slab_free+0xe/0x10 [ 165.735750] kmem_cache_free+0x83/0x290 [ 165.739724] sock_destroy_inode+0x51/0x60 [ 165.743871] destroy_inode+0x159/0x200 [ 165.747789] evict+0x5e0/0x980 [ 165.750981] iput+0x679/0xa90 [ 165.754091] dentry_unlink_inode+0x461/0x5e0 [ 165.758501] __dentry_kill+0x44c/0x7a0 [ 165.762387] dentry_kill+0xc9/0x5a0 [ 165.766020] dput.part.26+0x660/0x790 [ 165.769818] dput+0x15/0x20 [ 165.772745] __fput+0x4cf/0xa30 [ 165.776022] ____fput+0x15/0x20 [ 165.779306] task_work_run+0x1e8/0x2a0 [ 165.783196] exit_to_usermode_loop+0x318/0x380 [ 165.787796] do_fast_syscall_32+0xcd5/0xfb2 [ 165.792123] entry_SYSENTER_compat+0x70/0x7f [ 165.796523] [ 165.798153] The buggy address belongs to the object at ffff8801ca5f8080 [ 165.798153] which belongs to the cache sock_inode_cache(33:syz0) of size 984 [ 165.812027] The buggy address is located 112 bytes inside of [ 165.812027] 984-byte region [ffff8801ca5f8080, ffff8801ca5f8458) [ 165.823906] The buggy address belongs to the page: [ 165.828836] page:ffffea0007297e00 count:1 mapcount:0 mapping:ffff8801d7f18780 index:0xffff8801ca5f8ffd [ 165.838280] flags: 0x2fffc0000000100(slab) [ 165.842522] raw: 02fffc0000000100 ffffea0006db8288 ffffea0006db9248 ffff8801d7f18780 [ 165.850412] raw: ffff8801ca5f8ffd ffff8801ca5f8080 0000000100000003 ffff880199576300 [ 165.858286] page dumped because: kasan: bad access detected [ 165.863994] page->mem_cgroup:ffff880199576300 [ 165.868478] [ 165.870099] Memory state around the buggy address: [ 165.875026] ffff8801ca5f7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.882384] ffff8801ca5f8000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.889758] >ffff8801ca5f8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.897115] ^ [ 165.904124] ffff8801ca5f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.911483] ffff8801ca5f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.918896] ================================================================== [ 165.926251] Disabling lock debugging due to kernel taint [ 165.931788] Kernel panic - not syncing: panic_on_warn set ... [ 165.931788] [ 165.939162] CPU: 1 PID: 6865 Comm: syz-executor0 Tainted: G B 4.19.0-rc3+ #134 [ 165.947819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.957189] Call Trace: [ 165.959776] dump_stack+0x1c4/0x2b4 [ 165.963407] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.968599] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 165.973356] panic+0x238/0x4e7 [ 165.976552] ? add_taint.cold.5+0x16/0x16 [ 165.980704] ? trace_hardirqs_on+0xb4/0x310 [ 165.985028] ? trace_hardirqs_on+0xb4/0x310 [ 165.989350] kasan_end_report+0x47/0x4f [ 165.993321] kasan_report.cold.9+0x76/0x309 [ 165.997641] ? sock_i_ino+0x94/0xa0 [ 166.001269] __asan_report_load8_noabort+0x14/0x20 [ 166.006218] sock_i_ino+0x94/0xa0 [ 166.009689] tipc_sk_fill_sock_diag+0x39c/0xd90 [ 166.014355] ? tipc_diag_dump+0x30/0x30 [ 166.018332] ? tipc_getname+0x7f0/0x7f0 [ 166.022309] ? graph_lock+0x170/0x170 [ 166.026108] ? __lock_sock+0x203/0x350 [ 166.029999] ? find_held_lock+0x36/0x1c0 [ 166.034062] ? mark_held_locks+0xc7/0x130 [ 166.038212] ? __local_bh_enable_ip+0x160/0x260 [ 166.042888] ? __local_bh_enable_ip+0x160/0x260 [ 166.047561] ? lockdep_hardirqs_on+0x421/0x5c0 [ 166.052140] ? trace_hardirqs_on+0xbd/0x310 [ 166.056463] ? lock_release+0x970/0x970 [ 166.060433] ? lock_sock_nested+0xe2/0x120 [ 166.064667] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 166.069680] ? skb_put+0x17b/0x1e0 [ 166.073218] ? memset+0x31/0x40 [ 166.076497] ? __nlmsg_put+0x14c/0x1b0 [ 166.080386] __tipc_add_sock_diag+0x233/0x360 [ 166.084900] tipc_nl_sk_walk+0x122/0x1d0 [ 166.088965] ? tipc_sock_diag_handler_dump+0x3d0/0x3d0 [ 166.094241] tipc_diag_dump+0x24/0x30 [ 166.098044] netlink_dump+0x519/0xd50 [ 166.101848] ? netlink_broadcast+0x50/0x50 [ 166.106094] __netlink_dump_start+0x4f1/0x6f0 [ 166.110691] ? tipc_data_ready+0x3e0/0x3e0 [ 166.114928] tipc_sock_diag_handler_dump+0x28e/0x3d0 [ 166.120032] ? __tipc_diag_gen_cookie+0xc0/0xc0 [ 166.124701] ? tipc_data_ready+0x3e0/0x3e0 [ 166.128935] ? tipc_unregister_sysctl+0x20/0x20 [ 166.133601] ? tipc_ioctl+0x3a0/0x3a0 [ 166.137408] ? netlink_deliver_tap+0x355/0xf80 [ 166.141992] sock_diag_rcv_msg+0x31d/0x410 [ 166.146232] netlink_rcv_skb+0x172/0x440 [ 166.150299] ? sock_diag_bind+0x80/0x80 [ 166.154276] ? netlink_ack+0xb80/0xb80 [ 166.158170] sock_diag_rcv+0x2a/0x40 [ 166.161890] netlink_unicast+0x5a5/0x760 [ 166.165960] ? netlink_attachskb+0x9a0/0x9a0 [ 166.170369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.175913] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 166.180931] netlink_sendmsg+0xa18/0xfc0 [ 166.184994] ? move_addr_to_kernel.part.18+0xc6/0x100 [ 166.190186] ? netlink_unicast+0x760/0x760 [ 166.194426] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 166.199353] ? apparmor_socket_sendmsg+0x29/0x30 [ 166.204105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.209642] ? security_socket_sendmsg+0x94/0xc0 [ 166.214402] ? netlink_unicast+0x760/0x760 [ 166.218638] sock_sendmsg+0xd5/0x120 [ 166.222351] ___sys_sendmsg+0x7fd/0x930 [ 166.226325] ? __local_bh_enable_ip+0x160/0x260 [ 166.230995] ? copy_msghdr_from_user+0x580/0x580 [ 166.235753] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 166.241203] ? release_sock+0x1ec/0x2c0 [ 166.245183] ? __fget_light+0x2e9/0x430 [ 166.249155] ? fget_raw+0x20/0x20 [ 166.252612] ? __release_sock+0x3a0/0x3a0 [ 166.256762] ? tipc_nametbl_build_group+0x273/0x360 [ 166.261778] ? tipc_setsockopt+0x726/0xd70 [ 166.266015] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.271549] ? sockfd_lookup_light+0xc5/0x160 [ 166.276044] __sys_sendmsg+0x11d/0x280 [ 166.279934] ? __ia32_sys_shutdown+0x80/0x80 [ 166.284350] ? do_fast_syscall_32+0x150/0xfb2 [ 166.288862] ? do_fast_syscall_32+0x150/0xfb2 [ 166.293371] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 166.298830] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 166.303589] do_fast_syscall_32+0x34d/0xfb2 [ 166.307920] ? do_int80_syscall_32+0x890/0x890 [ 166.312505] ? entry_SYSENTER_compat+0x68/0x7f [ 166.317087] ? trace_hardirqs_off_caller+0xbb/0x310 [ 166.322105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.326949] ? trace_hardirqs_on_caller+0x310/0x310 [ 166.331965] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 166.336981] ? recalc_sigpending_tsk+0x180/0x180 [ 166.341735] ? kasan_check_write+0x14/0x20 [ 166.345974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.350820] entry_SYSENTER_compat+0x70/0x7f [ 166.355226] RIP: 0023:0xf7f35ca9 [ 166.358592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 166.377491] RSP: 002b:00000000f5f310cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 166.385221] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 166.392508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.399782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.407055] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.414321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.421945] Dumping ftrace buffer: [ 166.425478] (ftrace buffer empty) [ 166.429894] Kernel Offset: disabled [ 166.433520] Rebooting in 86400 seconds..