[....] Starting OpenBSD Secure Shell server: sshd[ 50.118958] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 50.455681] audit: type=1800 audit(1538806582.510:29): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 50.475581] audit: type=1800 audit(1538806582.510:30): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 53.922710] random: sshd: uninitialized urandom read (32 bytes read) [ 54.254325] random: sshd: uninitialized urandom read (32 bytes read) [ 55.704505] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. [ 61.594265] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/06 06:16:35 fuzzer started [ 65.628310] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/06 06:16:39 dialing manager at 10.128.0.26:36867 2018/10/06 06:16:39 syscalls: 1 2018/10/06 06:16:39 code coverage: enabled 2018/10/06 06:16:39 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/06 06:16:39 setuid sandbox: enabled 2018/10/06 06:16:39 namespace sandbox: enabled 2018/10/06 06:16:39 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 06:16:39 fault injection: enabled 2018/10/06 06:16:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 06:16:39 net packed injection: enabled 2018/10/06 06:16:39 net device setup: enabled [ 70.679492] random: crng init done 06:18:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x18, 0x0, 0x7, "4410051100ef000097"}], 0x18}, 0x0) [ 168.850457] IPVS: ftp: loaded support on port[0] = 21 [ 170.876732] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.883192] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.891464] device bridge_slave_0 entered promiscuous mode [ 171.013822] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.020259] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.028510] device bridge_slave_1 entered promiscuous mode [ 171.149211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.270343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.415597] ip (6137) used greatest stack depth: 53088 bytes left [ 171.659347] bond0: Enslaving bond_slave_0 as an active interface with an up link 06:18:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000005001}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1, 0x0, 0xffffff7f}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) pipe2(&(0x7f0000000080), 0x0) [ 171.784749] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.546762] IPVS: ftp: loaded support on port[0] = 21 [ 172.623483] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.631354] team0: Port device team_slave_0 added [ 172.840290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.848281] team0: Port device team_slave_1 added [ 173.071312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.079802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.088601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.295666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.457340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.464913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.473741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.655384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.662873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.671795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.766881] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.773776] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.781844] device bridge_slave_0 entered promiscuous mode [ 175.981195] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.987997] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.996258] device bridge_slave_1 entered promiscuous mode [ 176.143130] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.149659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.156635] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.163060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.171616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.212629] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.334324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 06:18:28 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x2000000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$TCSBRKP(r0, 0x5425, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='/dev/md0\x00', 0xffffffffffffffff}, 0x30) rt_sigqueueinfo(r2, 0x3f, &(0x7f0000000200)={0x9, 0x0, 0x5, 0x1}) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6}}, {{}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) ioctl$BLKPG(0xffffffffffffffff, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f00000000c0)}) [ 176.894166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.031197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.232079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.344319] IPVS: ftp: loaded support on port[0] = 21 [ 177.439137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.446328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.681805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.688946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.432824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.440825] team0: Port device team_slave_0 added [ 178.660930] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.668890] team0: Port device team_slave_1 added [ 178.883082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.153174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.160436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.169174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.494954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.502568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.511367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.759500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.767220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.776062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.251843] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.258650] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.266921] device bridge_slave_0 entered promiscuous mode [ 181.448920] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.455472] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.463704] device bridge_slave_1 entered promiscuous mode [ 181.698060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.951447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.577362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.649750] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.656283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.663143] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.669684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.678236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.893499] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.123713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.134962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.184543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:18:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x2c) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1, &(0x7f0000003580)=""/84, 0x54}, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc, 0xffcd, &(0x7f0000000080), 0x3, &(0x7f0000000000), 0x11d}}], 0x4000000000001bf, 0x0) [ 183.499648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.506859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.471548] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.479596] team0: Port device team_slave_0 added [ 184.491380] IPVS: ftp: loaded support on port[0] = 21 [ 184.771428] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.779452] team0: Port device team_slave_1 added [ 185.133595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.140670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.149332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.397180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.405881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.414614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.737602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.745363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.754319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.033917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.063520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.072259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.426949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.559881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.396511] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.402966] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.411384] device bridge_slave_0 entered promiscuous mode [ 189.584619] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.591068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.598027] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.604518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.612918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.765805] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.772254] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.780557] device bridge_slave_1 entered promiscuous mode [ 189.789863] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.796344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.804172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.974025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.115753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.428954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.005528] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.338485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.685496] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x3c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x277]}) [ 191.948192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 191.956258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.290280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.297604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.166860] IPVS: ftp: loaded support on port[0] = 21 [ 193.428515] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.436529] team0: Port device team_slave_0 added [ 193.846895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.854963] team0: Port device team_slave_1 added [ 194.207420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.214664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.223230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.572132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.579318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.588067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.935138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.942897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.951585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.327459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.335264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.344073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.444702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.814498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.225982] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.232452] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.240842] device bridge_slave_0 entered promiscuous mode [ 199.293939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.300319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.321664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:18:51 executing program 0: ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20000000) [ 199.651169] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.657800] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.666082] device bridge_slave_1 entered promiscuous mode [ 199.719909] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.726427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.733284] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.739815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.747923] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.103662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.408735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.416923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.665997] 8021q: adding VLAN 0 to HW filter on device team0 06:18:53 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x810, 0x80005, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x3f}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x8201}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r2, 0x6}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x115, &(0x7f00000024c0)=""/129, 0x81}, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000007c0)=@ipx, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000840)=""/86, 0x56}, {&(0x7f0000000a40)=""/108, 0x6c}], 0x2, &(0x7f0000000d00)=""/222, 0xde, 0x4}, 0x4}], 0x1, 0x100, &(0x7f00000008c0)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xfffffffffffffe50}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000e00)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x8}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 201.472277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.817469] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:18:54 executing program 0: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)}, 0x10) [ 202.203774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.210895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:18:54 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x1265, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x600000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x1, 0xffff, 0x10001}, 0xc) [ 202.582851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.590051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:18:55 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7bdf}, 0x1c) r1 = fcntl$getown(r0, 0x9) accept4(r0, &(0x7f00000001c0)=@can, &(0x7f0000000040)=0x80, 0x80000) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', r3}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@remote, 0x3a, r4}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x5, &(0x7f00000000c0)=""/209) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) 06:18:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x2, 0x5, 0x6, 0x0, 0x5, 0xc7, 0x1, 0x8, 0x3ff, 0x0, 0x81, 0x8, 0x0, 0xfff, 0xfffffffffffffff7, 0x0, 0x6ca, 0x7d3, 0x3}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/rt_acct\x00') socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r2, &(0x7f00000001c0), 0x8000) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x60) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x13, 0x29, 0x3, 0x6, 0x2, 0x725, 0x5, 0x100, 0xffffffffffffffff}}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000300)={0x2, 0x8, 0x3, 0x8}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000340)=0x4000) io_setup(0x4cc82b76, &(0x7f0000000380)=0x0) io_submit(r5, 0x4, &(0x7f0000001640)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffa, 0x0, 0x2, r0}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0xf, 0x101, r0, &(0x7f0000001400)="c64b6dcb89d83336d7c2d5ed2d60690fd78cc9138783f223da7a07d61c22726d5790c97ccc041c8933c980245c89537a6b46911f3118803a86", 0x39, 0xffffffff00000001, 0x0, 0x1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r2, &(0x7f0000001480)="aa2f01f0e7e4355617865c892334966e02e13c115c7a31ca0a0e299fd07cd41fba5a90dfcf8279507e2ae1343260ac7a30b7f113e67a71", 0x37, 0x9, 0x0, 0x2, r2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x9586378f44a0a4d5, 0x7, r0, &(0x7f0000001500)="500fff5a21561b2db352e5199fd8ac5c128f0b54ed2ef39680563c59270fd54aa0eafe892c87932c73a9f1f57043d37238b2b7981ead94b6d43ad5a3f5910f3ab4745f1484a4afb563787d830dc570ace0427e0224d1538055a84637f589acb6f8a99aebd642a07cfc78266811c135b9cdd386652293b4efe191b5f2b29d6319afeadaa75d80fb4964b34c7f7c86efd9c502b5963cf14f733b45d0d279dc871388cdda27dbce1bf35dd655015a343d0ae20a5d2dad910bf68dd1a72585a18f79b7", 0xc1, 0x8, 0x0, 0x0, r0}]) keyctl$join(0x1, &(0x7f0000001680)={'syz', 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000017c0)={'teql0\x00', &(0x7f00000016c0)=@ethtool_eeprom={0x0, 0x1ff, 0x8, 0xcc, "1fc399ed8a10cc7580a799a44213071677b674fb88b02c4d546cbe2fc6fcf73cf54d121bb841a378cb6f881473cbf2e3e89ae2a087a5bf10c4fd918d5316fd0835652979b6362dcac0f9edd3e7ce0b14153a75004c34b3ea0eb02d87e17eb794d94e9e89d44e078dd1ace1f625c0fbe8361e3a10611f911d11be50675f83dd03b498146d7d1acf8abdb8607be1a5967eaad793aabbd112eea514dfa8ada7eef7d534ff0827d248e12524a1a5120fdcf6492b9252711c79a1fcca58488130f6803bc7a8866fa044c161a11989"}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001840)={r2, 0x3, 0x1, 0x3, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={&(0x7f0000001880), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)=@newqdisc={0x74, 0x24, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, r6, {0xa, 0xfffb}, {0x7}, {0x7, 0xfffb}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x2, {{0xffff, 0x4, 0x8000, 0x1, 0x8}, 0x8, 0x1, 0x5, 0x7f, 0x0, 0x18, 0x1, 0x18, 0x3, {0x0, 0x1, 0x9, 0x1, 0x1126, 0x5}}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000001d40)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/fuse\x00', 0x2, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000001dc0)={0x2, 0x800}) sendto$unix(r2, &(0x7f0000001e00)="c303ac849f89100db9", 0x9, 0x4000, &(0x7f0000001e40)=@file={0x1, './file0\x00'}, 0x6e) sendfile(r2, r7, 0x0, 0xffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001ec0)={'raw\x00', 0x57, "8041055e37a5187fe13cd2dae14d2ca6282d707f499a6549f6918d1576b4f6f7eeaff3222c2246749b917a7ac9303c4d74986c014d603bedc235a38402f25f7d377cde92a9e8bca4116a3c0498ec844664f4ff24cba230"}, &(0x7f0000001f40)=0x7b) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001f80)) connect$rds(r7, &(0x7f0000001fc0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000002000)={0x3, 0x0, @ioapic={0xf000, 0xe000000000000, 0x0, 0x1, 0x0, [{0x9, 0x7, 0x81, [], 0x4bd9e252}, {0x8, 0x4, 0x8, [], 0xffff}, {0x5e, 0x2, 0x800, [], 0x1}, {0x6, 0x8, 0x3, [], 0x7b81}, {0xca05, 0x6, 0x5, [], 0x80}, {0x1, 0x8}, {0x3, 0x80000001, 0x0, [], 0xffffffffffff4f4b}, {0x4, 0x0, 0x7ff, [], 0x20}, {0x400, 0x1f, 0x4, [], 0xe15c}, {0x1, 0x7, 0x98b, [], 0x9}, {0x3, 0x31, 0x1, [], 0x6}, {0x2, 0x7, 0x2, [], 0x6}, {0x2, 0xe5d, 0x7fff, [], 0x3}, {0x0, 0x7ff, 0x6, [], 0x9}, {0x10000, 0x9, 0x660}, {0xbc, 0xb855, 0x20, [], 0x8}, {0x20, 0x7, 0x40, [], 0x1000}, {0x7, 0x100, 0x0, [], 0x6}, {0x424, 0x0, 0xffff, [], 0xfff}, {0x8, 0x10001, 0xa7e, [], 0x3}, {0x5, 0x8, 0x459, [], 0x80000000}, {0x6, 0x7, 0x5c169877, [], 0x7f}, {0x6, 0x8, 0x401, [], 0x2b}, {0x6, 0x0, 0xfff, [], 0x9}]}}) 06:18:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 203.725078] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.732924] team0: Port device team_slave_0 added 06:18:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x176]}) [ 204.130863] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 204.175555] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.183509] team0: Port device team_slave_1 added [ 204.290443] hrtimer: interrupt took 44631 ns [ 204.369857] IPVS: ftp: loaded support on port[0] = 21 [ 204.406488] ================================================================== [ 204.413894] BUG: KMSAN: uninit-value in vmx_vcpu_load+0x10d5/0x1cf0 [ 204.420317] CPU: 1 PID: 6976 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #63 [ 204.428009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.437364] Call Trace: [ 204.439967] dump_stack+0x306/0x460 [ 204.443606] ? vmx_vcpu_load+0x10d5/0x1cf0 [ 204.447862] kmsan_report+0x1a3/0x2d0 [ 204.451675] __msan_warning+0x7c/0xe0 [ 204.455481] vmx_vcpu_load+0x10d5/0x1cf0 [ 204.459562] ? vmx_prepare_switch_to_guest+0x1720/0x1720 [ 204.465021] kvm_arch_vcpu_load+0x3c8/0xff0 [ 204.469359] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 204.474826] vcpu_load+0x5f/0x70 [ 204.478219] kvm_arch_destroy_vm+0x445/0xcd0 [ 204.482646] kvm_put_kvm+0x100b/0x1cf0 [ 204.486574] kvm_vcpu_release+0xad/0x100 [ 204.490647] ? kvm_vcpu_mmap+0x80/0x80 [ 204.495002] __fput+0x4e8/0xda0 [ 204.498303] ____fput+0x37/0x40 [ 204.501593] ? fput+0x3e0/0x3e0 [ 204.504883] task_work_run+0x467/0x500 [ 204.508793] prepare_exit_to_usermode+0x364/0x470 [ 204.513649] syscall_return_slowpath+0x112/0x880 [ 204.518417] ? __close_fd+0x465/0x4c0 [ 204.522239] ? __se_sys_close+0x72/0x140 [ 204.526314] do_syscall_64+0xe4/0x100 [ 204.530135] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.535333] RIP: 0033:0x411051 [ 204.538531] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 204.557437] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 204.565151] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411051 [ 204.572419] RDX: 0000000000000000 RSI: 0000000000731618 RDI: 0000000000000006 [ 204.579687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.586961] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 204.594230] R13: 0000000000000001 R14: 0000000000000007 R15: 0000000000000000 [ 204.601513] [ 204.603142] Local variable description: ----error.i@vmx_vcpu_load [ 204.609368] Variable was created at: [ 204.613093] vmx_vcpu_load+0x1a0/0x1cf0 [ 204.617084] kvm_arch_vcpu_load+0x3c8/0xff0 [ 204.621405] ================================================================== [ 204.628755] Disabling lock debugging due to kernel taint [ 204.634204] Kernel panic - not syncing: panic_on_warn set ... [ 204.634204] [ 204.641599] CPU: 1 PID: 6976 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #63 [ 204.650177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.659536] Call Trace: [ 204.662149] dump_stack+0x306/0x460 [ 204.665800] panic+0x54c/0xafa [ 204.669034] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 204.674517] kmsan_report+0x2cd/0x2d0 [ 204.678337] __msan_warning+0x7c/0xe0 [ 204.682155] vmx_vcpu_load+0x10d5/0x1cf0 [ 204.686250] ? vmx_prepare_switch_to_guest+0x1720/0x1720 [ 204.691719] kvm_arch_vcpu_load+0x3c8/0xff0 [ 204.696057] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 204.701522] vcpu_load+0x5f/0x70 [ 204.704925] kvm_arch_destroy_vm+0x445/0xcd0 [ 204.709344] kvm_put_kvm+0x100b/0x1cf0 [ 204.713282] kvm_vcpu_release+0xad/0x100 [ 204.717353] ? kvm_vcpu_mmap+0x80/0x80 [ 204.721249] __fput+0x4e8/0xda0 [ 204.724550] ____fput+0x37/0x40 [ 204.727830] ? fput+0x3e0/0x3e0 [ 204.731145] task_work_run+0x467/0x500 [ 204.735113] prepare_exit_to_usermode+0x364/0x470 [ 204.739973] syscall_return_slowpath+0x112/0x880 [ 204.744735] ? __close_fd+0x465/0x4c0 [ 204.748557] ? __se_sys_close+0x72/0x140 [ 204.752630] do_syscall_64+0xe4/0x100 [ 204.756444] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.761634] RIP: 0033:0x411051 [ 204.764828] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 204.783730] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 204.791447] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411051 [ 204.798716] RDX: 0000000000000000 RSI: 0000000000731618 RDI: 0000000000000006 [ 204.805987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.813256] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 204.820524] R13: 0000000000000001 R14: 0000000000000007 R15: 0000000000000000 [ 204.828995] Kernel Offset: disabled [ 204.832619] Rebooting in 86400 seconds..