[ 26.747774] audit: type=1800 audit(1545637129.754:21): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 26.775350] audit: type=1800 audit(1545637129.764:22): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts. 2018/12/24 07:38:59 fuzzer started 2018/12/24 07:39:01 dialing manager at 10.128.0.26:34681 2018/12/24 07:39:01 syscalls: 1 2018/12/24 07:39:01 code coverage: enabled 2018/12/24 07:39:01 comparison tracing: enabled 2018/12/24 07:39:01 setuid sandbox: enabled 2018/12/24 07:39:01 namespace sandbox: enabled 2018/12/24 07:39:01 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/24 07:39:01 fault injection: enabled 2018/12/24 07:39:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/24 07:39:01 net packet injection: enabled 2018/12/24 07:39:01 net device setup: enabled 07:41:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x1) syzkaller login: [ 168.367913] IPVS: ftp: loaded support on port[0] = 21 07:41:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) [ 168.660845] IPVS: ftp: loaded support on port[0] = 21 07:41:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000007000000080000806a010000"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) [ 168.987609] IPVS: ftp: loaded support on port[0] = 21 07:41:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 169.347774] IPVS: ftp: loaded support on port[0] = 21 07:41:12 executing program 4: pipe(0x0) timerfd_gettime(0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r0 = gettid() rt_sigqueueinfo(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0)="7973f78caa6a0b65a2", 0x0}}, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x382) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, 0x0, 0x101f2) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1, 0x80005, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x0, 0x0, @local, 0x77e}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x0, [0x2]}, 0x5c) fstat(0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() ioctl(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) tkill(r0, 0x1000000000016) [ 169.865479] IPVS: ftp: loaded support on port[0] = 21 [ 169.923422] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.931891] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.939663] device bridge_slave_0 entered promiscuous mode 07:41:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0xffffffffffffffec, 0x0) getpeername(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffff7f) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getpid() rt_sigqueueinfo(0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, 0x0) getresuid(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup2(r0, r2) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0xfffffffffffffcf6) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) [ 170.111244] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.117683] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.140121] device bridge_slave_1 entered promiscuous mode [ 170.253361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.401281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.445280] IPVS: ftp: loaded support on port[0] = 21 [ 170.510636] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.517107] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.525794] device bridge_slave_0 entered promiscuous mode [ 170.648031] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.682808] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.690268] device bridge_slave_1 entered promiscuous mode [ 170.860844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.895392] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.997822] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.010362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.166942] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.174146] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.182259] device bridge_slave_0 entered promiscuous mode [ 171.326810] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.333562] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.341540] device bridge_slave_1 entered promiscuous mode [ 171.426806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.487068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.557073] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.614452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.665886] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.677286] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.685229] device bridge_slave_0 entered promiscuous mode [ 171.695201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.707053] team0: Port device team_slave_0 added [ 171.714816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.751639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.818544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.828685] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.843230] team0: Port device team_slave_1 added [ 171.859739] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.866233] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.876283] device bridge_slave_1 entered promiscuous mode [ 171.893607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.953985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.018979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.077529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.096819] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.106610] team0: Port device team_slave_0 added [ 172.144087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.163860] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.235137] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.243441] team0: Port device team_slave_1 added [ 172.250987] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.257369] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.268597] device bridge_slave_0 entered promiscuous mode [ 172.297241] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.314343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.341654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.366112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.391926] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.401311] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.416268] device bridge_slave_1 entered promiscuous mode [ 172.431394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.446413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.461252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.484831] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.502622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.520893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.545292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.558892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.567347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.577731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.588477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.608617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.616821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.628940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.649024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.688617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.709372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.721268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.758630] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.765817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.774593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.807108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.842448] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.853565] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.862344] device bridge_slave_0 entered promiscuous mode [ 172.870927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.878662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.915749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.938679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.954897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.992176] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.000339] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.008799] device bridge_slave_1 entered promiscuous mode [ 173.053239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.079786] team0: Port device team_slave_0 added [ 173.125454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.189614] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.223023] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.230937] team0: Port device team_slave_1 added [ 173.259695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.288374] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.309185] team0: Port device team_slave_0 added [ 173.317994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.360083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.370508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.394893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.411580] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.423171] team0: Port device team_slave_1 added [ 173.479356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.486199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.560023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.566854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.576628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.601480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.613789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.629078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.662876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.672579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.693950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.718977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.754402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.771214] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.785141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.814902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.829215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.848818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.879399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.892357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.907172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.945785] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.973671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.009089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.057374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.081408] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.097552] team0: Port device team_slave_0 added [ 174.108930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.139875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.150953] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.157455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.164519] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.170884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.178026] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.216628] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.239182] team0: Port device team_slave_1 added [ 174.358560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.390937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.397784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.416579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.456948] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.463440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.470162] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.476539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.488634] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.501221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.508652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.526402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.561499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.598969] team0: Port device team_slave_0 added [ 174.619100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.626457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.659834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.708736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.716112] team0: Port device team_slave_1 added [ 174.744854] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.778827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.788981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.850197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.857084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.866113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.005121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.140679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.147826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.162540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.257571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.274291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.282499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.295323] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.301751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.308472] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.314876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.338930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.368765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.386595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.533753] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.540185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.546848] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.553271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.583941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.207559] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.214039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.220731] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.227095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.259950] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.438920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.462328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.640522] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.646908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.653641] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.660056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.680643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.478574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.191327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.639094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.674057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.046476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.201320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.214854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.222735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.489149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.495438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.503215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.533167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.708632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.719152] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.858319] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.048833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.206205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.326951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.495514] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.528834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.543256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.720539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.731429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.754180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.770681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.801606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.031981] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.167722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.199816] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.209708] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.218669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.233265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.606117] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.618548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.625607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.652217] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.141336] 8021q: adding VLAN 0 to HW filter on device team0 07:41:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) 07:41:26 executing program 0: r0 = socket(0x400000000000010, 0x803, 0x0) write(r0, &(0x7f0000000040)="240000001a0025f00485bc04fef7001d0a0b48ff2265cea203881e2b5100030001000000", 0x24) 07:41:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=ANY=[], 0x0}, 0x48) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$cgroup_int(r3, &(0x7f0000000340), 0x12) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) [ 183.620739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 07:41:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 07:41:26 executing program 0: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0xfffffd9b}]) 07:41:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0xa82af44881fab181) 07:41:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 07:41:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 184.171557] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 184.219930] print_req_error: I/O error, dev loop0, sector 1032 flags 80700 [ 184.278611] ================================================================== [ 184.286101] BUG: KASAN: slab-out-of-bounds in fpstate_init+0x50/0x160 [ 184.292695] Write of size 832 at addr ffff8881b7cdcbc0 by task syz-executor1/7564 [ 184.300313] [ 184.301959] CPU: 1 PID: 7564 Comm: syz-executor1 Not tainted 4.20.0-rc6-next-20181217+ #172 [ 184.310462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.310471] Call Trace: [ 184.310492] dump_stack+0x244/0x39d [ 184.310513] ? dump_stack_print_info.cold.1+0x20/0x20 [ 184.310537] ? printk+0xa7/0xcf [ 184.310556] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 184.310584] print_address_description.cold.4+0x9/0x1ff [ 184.331302] ? fpstate_init+0x50/0x160 [ 184.331318] kasan_report.cold.5+0x1b/0x39 [ 184.331331] ? fpstate_init+0x50/0x160 [ 184.331348] ? fpstate_init+0x50/0x160 [ 184.331364] check_memory_region+0x13e/0x1b0 [ 184.331379] memset+0x23/0x40 [ 184.368077] fpstate_init+0x50/0x160 [ 184.371804] kvm_arch_vcpu_init+0x3e9/0x870 [ 184.376140] kvm_vcpu_init+0x2fa/0x420 [ 184.380075] ? vcpu_stat_get+0x300/0x300 [ 184.384145] ? kmem_cache_alloc+0x33f/0x730 [ 184.388487] vmx_create_vcpu+0x1b7/0x2695 [ 184.392680] ? perf_trace_sched_process_exec+0x860/0x860 [ 184.398139] ? do_raw_spin_unlock+0xa7/0x330 [ 184.402562] ? vmx_exec_control+0x210/0x210 [ 184.406921] ? kasan_check_write+0x14/0x20 [ 184.411165] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 184.411182] ? futex_wait_queue_me+0x55d/0x840 [ 184.411200] ? wait_for_completion+0x8a0/0x8a0 [ 184.411221] ? print_usage_bug+0xc0/0xc0 [ 184.411242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.411261] ? get_futex_value_locked+0xcb/0xf0 [ 184.411281] kvm_arch_vcpu_create+0xe5/0x220 [ 184.420855] ? kvm_arch_vcpu_free+0x90/0x90 [ 184.420880] kvm_vm_ioctl+0x526/0x2030 [ 184.420895] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 184.420910] ? futex_wait+0x5ec/0xa50 [ 184.420926] ? kvm_unregister_device_ops+0x70/0x70 [ 184.420949] ? mark_held_locks+0x130/0x130 [ 184.420966] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 184.420986] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 184.421000] ? futex_wake+0x304/0x760 [ 184.421036] ? __lock_acquire+0x62f/0x4c20 [ 184.421066] ? mark_held_locks+0x130/0x130 [ 184.421082] ? graph_lock+0x270/0x270 [ 184.421096] ? do_futex+0x249/0x26d0 [ 184.421114] ? rcu_read_unlock_special+0x370/0x370 [ 184.421132] ? rcu_softirq_qs+0x20/0x20 [ 184.509336] ? unwind_dump+0x190/0x190 [ 184.513242] ? find_held_lock+0x36/0x1c0 [ 184.517318] ? __fget+0x4aa/0x740 [ 184.520776] ? lock_downgrade+0x900/0x900 [ 184.524926] ? check_preemption_disabled+0x48/0x280 [ 184.529946] ? kasan_check_read+0x11/0x20 [ 184.534097] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 184.539375] ? rcu_read_unlock_special+0x370/0x370 [ 184.544321] ? __fget+0x4d1/0x740 [ 184.547788] ? ksys_dup3+0x680/0x680 [ 184.551512] ? __might_fault+0x12b/0x1e0 [ 184.555584] ? lock_downgrade+0x900/0x900 [ 184.559737] ? lock_release+0xa00/0xa00 [ 184.563714] ? perf_trace_sched_process_exec+0x860/0x860 [ 184.569173] ? kvm_unregister_device_ops+0x70/0x70 [ 184.574111] do_vfs_ioctl+0x1de/0x1790 [ 184.578019] ? ioctl_preallocate+0x300/0x300 [ 184.582431] ? __fget_light+0x2e9/0x430 [ 184.586407] ? fget_raw+0x20/0x20 [ 184.589865] ? _copy_to_user+0xc8/0x110 [ 184.593845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.599388] ? put_timespec64+0x10f/0x1b0 [ 184.603540] ? nsecs_to_jiffies+0x30/0x30 [ 184.607690] ? do_syscall_64+0x9a/0x820 [ 184.611672] ? do_syscall_64+0x9a/0x820 [ 184.615650] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 184.620238] ? security_file_ioctl+0x94/0xc0 [ 184.624657] ksys_ioctl+0xa9/0xd0 [ 184.628115] __x64_sys_ioctl+0x73/0xb0 [ 184.632015] do_syscall_64+0x1b9/0x820 [ 184.635909] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 184.641276] ? syscall_return_slowpath+0x5e0/0x5e0 [ 184.646210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.651089] ? trace_hardirqs_on_caller+0x310/0x310 [ 184.656113] ? prepare_exit_to_usermode+0x291/0x3b0 [ 184.661136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.665987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.671181] RIP: 0033:0x457669 [ 184.674407] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.693305] RSP: 002b:00007f1681046c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.701021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 184.708321] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 184.715600] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 184.722865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16810476d4 [ 184.730132] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 184.737427] [ 184.739065] Allocated by task 7564: [ 184.742690] save_stack+0x43/0xd0 [ 184.746142] kasan_kmalloc+0xcb/0xd0 [ 184.749859] kasan_slab_alloc+0x12/0x20 [ 184.753835] kmem_cache_alloc+0x130/0x730 [ 184.757982] vmx_create_vcpu+0x110/0x2695 [ 184.762136] kvm_arch_vcpu_create+0xe5/0x220 [ 184.766559] kvm_vm_ioctl+0x526/0x2030 [ 184.770447] do_vfs_ioctl+0x1de/0x1790 [ 184.774334] ksys_ioctl+0xa9/0xd0 [ 184.777785] __x64_sys_ioctl+0x73/0xb0 [ 184.781670] do_syscall_64+0x1b9/0x820 [ 184.785555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.790731] [ 184.792349] Freed by task 0: [ 184.795353] (stack is not available) [ 184.799064] [ 184.800690] The buggy address belongs to the object at ffff8881b7cdcb80 [ 184.800690] which belongs to the cache x86_fpu of size 832 [ 184.813352] The buggy address is located 64 bytes inside of [ 184.813352] 832-byte region [ffff8881b7cdcb80, ffff8881b7cdcec0) [ 184.825131] The buggy address belongs to the page: [ 184.830077] page:ffffea0006df3700 count:1 mapcount:0 mapping:ffff8881d4833c80 index:0x0 [ 184.838217] flags: 0x2fffc0000000200(slab) [ 184.842471] raw: 02fffc0000000200 ffff8881d4826048 ffff8881d4826048 ffff8881d4833c80 [ 184.850364] raw: 0000000000000000 ffff8881b7cdc040 0000000100000004 0000000000000000 [ 184.858252] page dumped because: kasan: bad access detected [ 184.863947] [ 184.865561] Memory state around the buggy address: [ 184.870483] ffff8881b7cdcd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.877859] ffff8881b7cdce00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.885246] >ffff8881b7cdce80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 184.892596] ^ [ 184.898047] ffff8881b7cdcf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.905403] ffff8881b7cdcf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.912750] ================================================================== [ 184.920100] Disabling lock debugging due to kernel taint [ 184.982925] Kernel panic - not syncing: panic_on_warn set ... [ 184.988840] CPU: 0 PID: 7564 Comm: syz-executor1 Tainted: G B 4.20.0-rc6-next-20181217+ #172 [ 184.998743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.008090] Call Trace: [ 185.010679] dump_stack+0x244/0x39d [ 185.014313] ? dump_stack_print_info.cold.1+0x20/0x20 [ 185.019531] ? fpstate_init+0x30/0x160 [ 185.023430] panic+0x2ad/0x632 [ 185.026642] ? add_taint.cold.5+0x16/0x16 [ 185.030797] ? preempt_schedule+0x4d/0x60 [ 185.034951] ? ___preempt_schedule+0x16/0x18 [ 185.039369] ? trace_hardirqs_on+0xb4/0x310 [ 185.043697] ? fpstate_init+0x50/0x160 [ 185.047585] end_report+0x47/0x4f [ 185.051059] kasan_report.cold.5+0xe/0x39 [ 185.055216] ? fpstate_init+0x50/0x160 [ 185.059106] ? fpstate_init+0x50/0x160 [ 185.062995] check_memory_region+0x13e/0x1b0 [ 185.067419] memset+0x23/0x40 [ 185.070522] fpstate_init+0x50/0x160 [ 185.074277] kvm_arch_vcpu_init+0x3e9/0x870 [ 185.078603] kvm_vcpu_init+0x2fa/0x420 [ 185.082494] ? vcpu_stat_get+0x300/0x300 [ 185.086582] ? kmem_cache_alloc+0x33f/0x730 [ 185.090920] vmx_create_vcpu+0x1b7/0x2695 [ 185.095095] ? perf_trace_sched_process_exec+0x860/0x860 [ 185.100548] ? do_raw_spin_unlock+0xa7/0x330 [ 185.104962] ? vmx_exec_control+0x210/0x210 [ 185.109295] ? kasan_check_write+0x14/0x20 [ 185.113543] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 185.118481] ? futex_wait_queue_me+0x55d/0x840 [ 185.123090] ? wait_for_completion+0x8a0/0x8a0 [ 185.127679] ? print_usage_bug+0xc0/0xc0 [ 185.131748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.137301] ? get_futex_value_locked+0xcb/0xf0 [ 185.141979] kvm_arch_vcpu_create+0xe5/0x220 [ 185.146420] ? kvm_arch_vcpu_free+0x90/0x90 [ 185.150752] kvm_vm_ioctl+0x526/0x2030 [ 185.154640] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 185.159746] ? futex_wait+0x5ec/0xa50 [ 185.163577] ? kvm_unregister_device_ops+0x70/0x70 [ 185.168519] ? mark_held_locks+0x130/0x130 [ 185.172798] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 185.177997] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 185.183117] ? futex_wake+0x304/0x760 [ 185.186932] ? __lock_acquire+0x62f/0x4c20 [ 185.191203] ? mark_held_locks+0x130/0x130 [ 185.195447] ? graph_lock+0x270/0x270 [ 185.199254] ? do_futex+0x249/0x26d0 [ 185.202992] ? rcu_read_unlock_special+0x370/0x370 [ 185.207950] ? rcu_softirq_qs+0x20/0x20 [ 185.211930] ? unwind_dump+0x190/0x190 [ 185.215848] ? find_held_lock+0x36/0x1c0 [ 185.219928] ? __fget+0x4aa/0x740 [ 185.223408] ? lock_downgrade+0x900/0x900 [ 185.227562] ? check_preemption_disabled+0x48/0x280 [ 185.232581] ? kasan_check_read+0x11/0x20 [ 185.236730] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 185.242036] ? rcu_read_unlock_special+0x370/0x370 [ 185.246985] ? __fget+0x4d1/0x740 [ 185.250468] ? ksys_dup3+0x680/0x680 [ 185.254197] ? __might_fault+0x12b/0x1e0 [ 185.258267] ? lock_downgrade+0x900/0x900 [ 185.262421] ? lock_release+0xa00/0xa00 [ 185.266402] ? perf_trace_sched_process_exec+0x860/0x860 [ 185.271865] ? kvm_unregister_device_ops+0x70/0x70 [ 185.276811] do_vfs_ioctl+0x1de/0x1790 [ 185.280712] ? ioctl_preallocate+0x300/0x300 [ 185.285138] ? __fget_light+0x2e9/0x430 [ 185.289118] ? fget_raw+0x20/0x20 [ 185.292581] ? _copy_to_user+0xc8/0x110 [ 185.296570] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.302134] ? put_timespec64+0x10f/0x1b0 [ 185.306292] ? nsecs_to_jiffies+0x30/0x30 [ 185.310448] ? do_syscall_64+0x9a/0x820 [ 185.314449] ? do_syscall_64+0x9a/0x820 [ 185.318442] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 185.323054] ? security_file_ioctl+0x94/0xc0 [ 185.327476] ksys_ioctl+0xa9/0xd0 [ 185.330937] __x64_sys_ioctl+0x73/0xb0 [ 185.334831] do_syscall_64+0x1b9/0x820 [ 185.338734] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 185.344120] ? syscall_return_slowpath+0x5e0/0x5e0 [ 185.349094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.353952] ? trace_hardirqs_on_caller+0x310/0x310 [ 185.358977] ? prepare_exit_to_usermode+0x291/0x3b0 [ 185.364048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.368903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.374099] RIP: 0033:0x457669 [ 185.377300] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.396205] RSP: 002b:00007f1681046c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.403923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 185.411193] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 185.418464] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.425740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16810476d4 [ 185.433028] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 185.441253] Kernel Offset: disabled [ 185.444873] Rebooting in 86400 seconds..