INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2018/04/07 07:41:08 fuzzer started 2018/04/07 07:41:09 dialing manager at 10.128.0.26:38639 2018/04/07 07:41:15 kcov=true, comps=false 2018/04/07 07:41:17 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000306000)={&(0x7f00003d7ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x104, 0x1a, 0x811, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in=@rand_addr, 0x4e20, 0x0, 0x4e20, 0x0, 0x9}, {@in6, 0x0, 0x2b}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, 0x104}, 0x1}, 0x0) 2018/04/07 07:41:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000f89000)=[{{&(0x7f0000f89000)=@vsock={0x0, 0x0, 0x0, @host}, 0x10, &(0x7f000016d000), 0x0, &(0x7f0000f89000)=""/130, 0x82}}, {{&(0x7f000006bffa)=@hci, 0x6, &(0x7f0000660000), 0x0, &(0x7f0000d3ef43)=""/189, 0xbd}}], 0x2, 0x2, &(0x7f0000f89ff0)={0x77359400}) mmap(&(0x7f0000f89000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f84f90)={0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10}, 0x1}, 0x0) 2018/04/07 07:41:17 executing program 7: unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0x0}) getpeername$unix(r0, &(0x7f00000001c0), &(0x7f0000001200)=0x1002) 2018/04/07 07:41:17 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f0000002880)=@hci, 0x80, &(0x7f0000002d80), 0x0, &(0x7f0000002e00)=""/216, 0xd8}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x1c9c380}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000387000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 2018/04/07 07:41:17 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000026000)=@filter={'filter\x00', 0xe, 0x1, 0x1d8, [0x0, 0x20000040, 0x20000070, 0x200001e8], 0x0, &(0x7f000013bff0), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bond0\x00', 'lo\x00', 'tunl0\x00', 'ip6gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe0, 0x110, 0x148, [@m802_3={'802_3\x00', 0x8}, @time={'time\x00', 0x18}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) 2018/04/07 07:41:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000017000)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000e7dff0)={&(0x7f0000b67fd0)=@ipv4_newroute={0x20, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2}, [@RTA_MULTIPATH={0x4, 0x9}]}, 0x20}, 0x1}, 0x0) 2018/04/07 07:41:17 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x610, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000cc0], 0x0, &(0x7f0000000240), &(0x7f0000000cc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'lo\x00', 'bcsf0\x00', 'irlan0\x00', 'ip_vti0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x120, 0x120, 0x158, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x680}}}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'erspan0\x00', 'ifb0\x00', 'rose0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xd0, 0x120}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x38}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0x138, 0x188, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x130, 0x180, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x688) 2018/04/07 07:41:17 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00006edf90)=[{&(0x7f000044eff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000dc7000), 0x0, &(0x7f0000a41000)}, {&(0x7f000062fff8)=@abs, 0x8, &(0x7f0000cc0000), 0x0, &(0x7f00005edf58)}], 0x2, 0x0) syzkaller login: [ 42.731139] ip (3736) used greatest stack depth: 54688 bytes left [ 43.344164] ip (3792) used greatest stack depth: 54672 bytes left [ 44.091738] ip (3870) used greatest stack depth: 53960 bytes left [ 44.340990] ip (3891) used greatest stack depth: 53656 bytes left [ 46.259906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.420266] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.577781] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.599992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.651168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.672436] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.891398] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.937778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.073242] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.153849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.175734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.187912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.307467] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.367526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.540372] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.763764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.803914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.810174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.820551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.871982] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.878236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.889662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.967712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.973964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.987704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.016236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.024228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.045677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.069791] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.083442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.105937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.133947] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.140208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.161886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.238663] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.245006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.261605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.560090] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.566336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.579995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/04/07 07:41:34 executing program 6: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000380)="560190c6d4e0b94df4e8aaa54fad8b56", 0x10, 0x8080, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x271) sendto$inet(r0, &(0x7f0000000000)="a5", 0x1, 0x0, &(0x7f0000df9ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 2018/04/07 07:41:34 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) 2018/04/07 07:41:34 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000ff0)={0x2, &(0x7f0000022000)=[{0x0, 0x0, 0x0, 0xffffffffffffffe0}, {0x16}]}) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) execve(&(0x7f0000417000)='./file0\x00', &(0x7f00008ec000), &(0x7f0000abffd0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000028000)='numa_maps\x00') open(&(0x7f000022b000)='./file0\x00', 0x401, 0x0) [ 57.512765] audit: type=1326 audit(1523086894.511:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5070 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0xffff0000 2018/04/07 07:41:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x400000000f, &(0x7f000048dffc)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f31000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000971ff0)={0x2, 0x4e20}, 0x10) 2018/04/07 07:41:35 executing program 5: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(r2, &(0x7f0000a66000)=[{}], 0x1, 0x0) dup2(r0, r2) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b80)}}], 0x1, 0x0, 0x0) 2018/04/07 07:41:35 executing program 3: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}}], 0x2c) clone(0x0, &(0x7f0000aed000), &(0x7f00006c3ffc), &(0x7f000049cffc), &(0x7f0000c12000)) sigaltstack(&(0x7f0000001000/0x1000)=nil, 0x0) 2018/04/07 07:41:35 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002f70)=[{&(0x7f0000002000)='u', 0x1}], 0x1) recvmsg(r0, &(0x7f0000b1e000)={&(0x7f0000b1eff0)=@ax25, 0x10, &(0x7f0000b1eff0), 0x0, &(0x7f0000b01fb7)=""/73, 0x49}, 0x0) connect$unix(r1, &(0x7f0000002000)=@abs, 0x8) 2018/04/07 07:41:35 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000480)=""/146) mkdirat(0xffffffffffffffff, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='configfs\x00', 0x1001, &(0x7f0000965ffe)) syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/04/07 07:41:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e5aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000002effc)=0xb92c, 0x4) writev(r0, &(0x7f00000bc000)=[{&(0x7f0000031f8c)='w', 0x1}], 0x1) dup3(r1, r0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f000069fffc)=0x5, 0x4) recvmsg$netrom(r2, &(0x7f0000e55000)={&(0x7f0000e59ff0)=@ax25={0x6, {"61ad643fe24db4"}}, 0x10, &(0x7f0000e55000), 0x0, &(0x7f000035a000)}, 0x10002) 2018/04/07 07:41:35 executing program 7: prctl$seccomp(0x2f, 0x0, &(0x7f00005d295e)={0x0, &(0x7f00004ff000)}) 2018/04/07 07:41:35 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000806000)={0x0, &(0x7f000068afe8)}) clock_gettime(0x0, &(0x7f0000feb000)={0x0}) setitimer(0x0, &(0x7f00003f8000)={{}, {r0, 0x2710}}, &(0x7f0000febfe0)) alarm(0x0) 2018/04/07 07:41:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000012000)={&(0x7f000000fff4)={0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000009000)=@acquire={0x12c, 0x17, 0x509, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002}, @in=@dev={0xac, 0x14}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast2=0xe0000002}, {{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, [@tmpl={0x4, 0x5}]}, 0x12c}, 0x1}, 0x0) 2018/04/07 07:41:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20000120, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x2, &(0x7f0000000100), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'tunl0\x00', 'gretap0\x00', 'eql\x00', 'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0xffffffff, "2efe4492b3e8f32974494d50c3ec54d2a7be9e6bfaebce3d31f6faab403d"}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "c72fb37e993aa0adc8ab46b853c934bda5d8c2e044e59a7a969261e607b5757f771b36bf171011f69afc9dbcff6c7f8f1b106d35032727de213b02cba241b953"}}}}]}, {0x0, '\x00', 0x1, 0xffdfffffffffffff}]}, 0x240) 2018/04/07 07:41:36 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r1, &(0x7f00003d6fc8)={&(0x7f0000698000)=@generic, 0x80, &(0x7f000081afd0), 0x0, &(0x7f0000f9fff8)=""/90, 0xfffffd4b}, 0x0) 2018/04/07 07:41:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e5aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000002effc)=0xb92c, 0x4) writev(r0, &(0x7f00000bc000)=[{&(0x7f0000031f8c)='w', 0x1}], 0x1) dup3(r1, r0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f000069fffc)=0x5, 0x4) recvmsg$netrom(r2, &(0x7f0000e55000)={&(0x7f0000e59ff0)=@ax25={0x6, {"61ad643fe24db4"}}, 0x10, &(0x7f0000e55000), 0x0, &(0x7f000035a000)}, 0x10002) 2018/04/07 07:41:36 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) recvmsg(r0, &(0x7f00000bbfc8)={&(0x7f0000bd2ff7)=@rc, 0x9, &(0x7f0000631ff0), 0x0, &(0x7f0000841f55)=""/171, 0xab}, 0x43) 2018/04/07 07:41:36 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0x264) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/07 07:41:36 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000016ffc), 0xf4) write(r0, &(0x7f000001b000)='U', 0x1) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0xf0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000051ff0)={0x0, 0x989680}, 0x0) seccomp(0x1, 0x0, &(0x7f0000044ff0)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000f5b000), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@proc={0x10}, 0xc, &(0x7f0000000680)}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000f61000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) read(r1, &(0x7f0000000000)=""/114, 0x72) 2018/04/07 07:41:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000001300), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)}}], 0x2, 0x8000) 2018/04/07 07:41:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000d68ff0)=@hopopts={0x0, 0xcf}, 0x8) 2018/04/07 07:41:36 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000d99000)=@newsa={0x10c, 0x10, 0x721, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@rand_addr, @in6=@dev={0xfe, 0x80}}, {@in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x2b}, @in=@rand_addr, {}, {}, {}, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000002}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20}}]}, 0x10c}, 0x1}, 0x0) 2018/04/07 07:41:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000026000)=@ipv4_newroute={0x24, 0x18, 0x21, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x24}, 0x1}, 0x0) 2018/04/07 07:41:36 executing program 3: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet(0x2, 0x3, 0x2f) sendto$inet(r1, &(0x7f000014cf2c), 0x0, 0x8000, &(0x7f00005b5ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000000)="e9a12289", 0x4, 0x0, &(0x7f0000cf9000)={0x2, 0x4e20}, 0x10) 2018/04/07 07:41:36 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e22, @rand_addr}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x2}], 0x10}}], 0x1c5c44ab974274f4, 0x0) 2018/04/07 07:41:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000575ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000028ffc), 0x4) r2 = dup(r1) sendto(r0, &(0x7f0000001fff)="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", 0x8c1, 0x0, 0x0, 0x0) r3 = gettid() sendmmsg(r0, &(0x7f0000e9f000)=[{{0x0, 0x0, &(0x7f0000ce5ff0)=[{&(0x7f0000f3afae)="86", 0x1}], 0x1, &(0x7f0000a11000)}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff}) clone(0x0, &(0x7f0000524ffe), &(0x7f00001b8ffc), &(0x7f000019cffc), &(0x7f0000eb9ffe)) dup3(r2, r4, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r4, 0xa, 0x12) tkill(r3, 0x16) listen$netrom(0xffffffffffffffff, 0x0) 2018/04/07 07:41:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e5aff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000002effc)=0xb92c, 0x4) writev(r0, &(0x7f00000bc000)=[{&(0x7f0000031f8c)='w', 0x1}], 0x1) dup3(r1, r0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f000069fffc)=0x5, 0x4) recvmsg$netrom(r2, &(0x7f0000e55000)={&(0x7f0000e59ff0)=@ax25={0x6, {"61ad643fe24db4"}}, 0x10, &(0x7f0000e55000), 0x0, &(0x7f000035a000)}, 0x10002) 2018/04/07 07:41:36 executing program 5: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ff4), &(0x7f0000000000)=0xc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) futex(&(0x7f0000005ffc), 0x4, 0x0, &(0x7f0000005ff0)={0x77359400}, &(0x7f0000000000), 0x0) 2018/04/07 07:41:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f7c000)=0x8000, 0x4) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000180), 0x0) [ 59.685180] ================================================================== [ 59.692610] BUG: KMSAN: uninit-value in __skb_flow_dissect+0x401f/0x6580 [ 59.699452] CPU: 1 PID: 5151 Comm: syz-executor3 Not tainted 4.16.0+ #81 [ 59.706289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.715634] Call Trace: [ 59.718226] dump_stack+0x185/0x1d0 [ 59.721859] ? __skb_flow_dissect+0x401f/0x6580 [ 59.726523] kmsan_report+0x142/0x240 [ 59.730324] __msan_warning_32+0x6c/0xb0 [ 59.734387] __skb_flow_dissect+0x401f/0x6580 [ 59.738882] ? __msan_chain_origin+0x69/0xc0 [ 59.743298] ? SyS_sendto+0x8a/0xb0 [ 59.746933] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.752300] ? __dev_queue_xmit+0x22d9/0x2b60 [ 59.756797] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 59.762251] __skb_get_hash_symmetric+0x10b/0x230 [ 59.767085] packet_rcv_fanout+0x38f/0x8d0 [ 59.771304] ? packet_direct_xmit+0xbf0/0xbf0 [ 59.775783] dev_queue_xmit_nit+0x111a/0x11e0 [ 59.780270] dev_hard_start_xmit+0x27c/0xc70 [ 59.784669] __dev_queue_xmit+0x22d9/0x2b60 [ 59.788986] dev_queue_xmit+0x4b/0x60 [ 59.793388] neigh_resolve_output+0xac6/0xb60 [ 59.797869] ? neigh_event_ns+0x360/0x360 [ 59.802000] ip_finish_output2+0x1238/0x1380 [ 59.806399] ip_finish_output+0xcb0/0xff0 [ 59.810531] ip_output+0x502/0x5c0 [ 59.814054] ? ip_mc_finish_output+0x3b0/0x3b0 [ 59.818621] ? ip_finish_output+0xff0/0xff0 [ 59.822923] ip_send_skb+0x5f3/0x820 [ 59.826618] ? __ip_local_out+0x5b0/0x5b0 [ 59.830757] ip_push_pending_frames+0x105/0x170 [ 59.835409] raw_sendmsg+0x2960/0x3ed0 [ 59.839294] ? compat_raw_ioctl+0x100/0x100 [ 59.843601] inet_sendmsg+0x48d/0x740 [ 59.847386] ? security_socket_sendmsg+0x9e/0x210 [ 59.852213] ? inet_getname+0x500/0x500 [ 59.856173] SYSC_sendto+0x6c3/0x7e0 [ 59.859869] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 59.865304] ? prepare_exit_to_usermode+0x149/0x3a0 [ 59.870308] SyS_sendto+0x8a/0xb0 [ 59.873741] do_syscall_64+0x309/0x430 [ 59.877611] ? SYSC_getpeername+0x560/0x560 [ 59.881915] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 59.887085] RIP: 0033:0x455259 [ 59.890256] RSP: 002b:00007f7983308c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 59.897943] RAX: ffffffffffffffda RBX: 00007f79833096d4 RCX: 0000000000455259 [ 59.905194] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000014 [ 59.912443] RBP: 000000000072bea0 R08: 0000000020cf9000 R09: 0000000000000010 [ 59.919695] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 59.926942] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 59.934192] [ 59.935796] Uninit was stored to memory at: [ 59.940098] kmsan_internal_chain_origin+0x12b/0x210 [ 59.945181] kmsan_memcpy_origins+0x11d/0x170 [ 59.949657] __msan_memcpy+0x19f/0x1f0 [ 59.953526] skb_copy_bits+0x63a/0xdb0 [ 59.957392] __skb_flow_dissect+0x3931/0x6580 [ 59.961867] __skb_get_hash_symmetric+0x10b/0x230 [ 59.966688] packet_rcv_fanout+0x38f/0x8d0 [ 59.970901] dev_queue_xmit_nit+0x111a/0x11e0 [ 59.975374] dev_hard_start_xmit+0x27c/0xc70 [ 59.979761] __dev_queue_xmit+0x22d9/0x2b60 [ 59.984063] dev_queue_xmit+0x4b/0x60 [ 59.987844] neigh_resolve_output+0xac6/0xb60 [ 59.992320] ip_finish_output2+0x1238/0x1380 [ 59.996710] ip_finish_output+0xcb0/0xff0 [ 60.000836] ip_output+0x502/0x5c0 [ 60.004353] ip_send_skb+0x5f3/0x820 [ 60.008052] ip_push_pending_frames+0x105/0x170 [ 60.012706] raw_sendmsg+0x2960/0x3ed0 [ 60.016574] inet_sendmsg+0x48d/0x740 [ 60.020358] SYSC_sendto+0x6c3/0x7e0 [ 60.024051] SyS_sendto+0x8a/0xb0 [ 60.027483] do_syscall_64+0x309/0x430 [ 60.031355] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.036520] Uninit was created at: [ 60.040045] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 60.045047] kmsan_alloc_page+0x82/0xe0 [ 60.049007] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 60.053747] alloc_pages_current+0x6b5/0x970 [ 60.058137] skb_page_frag_refill+0x3ba/0x5e0 [ 60.062609] sk_page_frag_refill+0xa4/0x340 [ 60.066909] __ip_append_data+0x107e/0x3d10 [ 60.071210] ip_append_data+0x2fb/0x440 [ 60.075165] raw_sendmsg+0x287b/0x3ed0 [ 60.079040] inet_sendmsg+0x48d/0x740 [ 60.082821] SYSC_sendto+0x6c3/0x7e0 [ 60.086517] SyS_sendto+0x8a/0xb0 [ 60.089947] do_syscall_64+0x309/0x430 [ 60.093815] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.098978] ================================================================== [ 60.106310] Disabling lock debugging due to kernel taint [ 60.111735] Kernel panic - not syncing: panic_on_warn set ... [ 60.111735] [ 60.119086] CPU: 1 PID: 5151 Comm: syz-executor3 Tainted: G B 4.16.0+ #81 [ 60.127203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.136534] Call Trace: [ 60.139111] dump_stack+0x185/0x1d0 [ 60.142723] panic+0x39d/0x940 [ 60.145911] ? __skb_flow_dissect+0x401f/0x6580 [ 60.150560] kmsan_report+0x238/0x240 [ 60.154343] __msan_warning_32+0x6c/0xb0 [ 60.158387] __skb_flow_dissect+0x401f/0x6580 [ 60.162862] ? __msan_chain_origin+0x69/0xc0 [ 60.167255] ? SyS_sendto+0x8a/0xb0 [ 60.170863] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.176210] ? __dev_queue_xmit+0x22d9/0x2b60 [ 60.180687] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 60.186126] __skb_get_hash_symmetric+0x10b/0x230 [ 60.190954] packet_rcv_fanout+0x38f/0x8d0 [ 60.195176] ? packet_direct_xmit+0xbf0/0xbf0 [ 60.199655] dev_queue_xmit_nit+0x111a/0x11e0 [ 60.204139] dev_hard_start_xmit+0x27c/0xc70 [ 60.208543] __dev_queue_xmit+0x22d9/0x2b60 [ 60.212855] dev_queue_xmit+0x4b/0x60 [ 60.216641] neigh_resolve_output+0xac6/0xb60 [ 60.221125] ? neigh_event_ns+0x360/0x360 [ 60.225255] ip_finish_output2+0x1238/0x1380 [ 60.229646] ip_finish_output+0xcb0/0xff0 [ 60.233777] ip_output+0x502/0x5c0 [ 60.237297] ? ip_mc_finish_output+0x3b0/0x3b0 [ 60.241861] ? ip_finish_output+0xff0/0xff0 [ 60.246162] ip_send_skb+0x5f3/0x820 [ 60.249856] ? __ip_local_out+0x5b0/0x5b0 [ 60.253991] ip_push_pending_frames+0x105/0x170 [ 60.258649] raw_sendmsg+0x2960/0x3ed0 [ 60.262533] ? compat_raw_ioctl+0x100/0x100 [ 60.266834] inet_sendmsg+0x48d/0x740 [ 60.270616] ? security_socket_sendmsg+0x9e/0x210 [ 60.275444] ? inet_getname+0x500/0x500 [ 60.279402] SYSC_sendto+0x6c3/0x7e0 [ 60.283097] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 60.288529] ? prepare_exit_to_usermode+0x149/0x3a0 [ 60.293534] SyS_sendto+0x8a/0xb0 [ 60.296971] do_syscall_64+0x309/0x430 [ 60.300844] ? SYSC_getpeername+0x560/0x560 [ 60.305149] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 60.310319] RIP: 0033:0x455259 [ 60.313489] RSP: 002b:00007f7983308c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 60.321178] RAX: ffffffffffffffda RBX: 00007f79833096d4 RCX: 0000000000455259 [ 60.328427] RDX: 0000000000000004 RSI: 0000000020000000 RDI: 0000000000000014 [ 60.335679] RBP: 000000000072bea0 R08: 0000000020cf9000 R09: 0000000000000010 [ 60.342927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 60.350179] R13: 00000000000004f7 R14: 00000000006fa7c8 R15: 0000000000000000 [ 60.357845] Dumping ftrace buffer: [ 60.361366] (ftrace buffer empty) [ 60.365047] Kernel Offset: disabled [ 60.368648] Rebooting in 86400 seconds..