[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 56.201779] sshd (6142) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 56.418653] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 57.343720] random: sshd: uninitialized urandom read (32 bytes read) [ 57.734920] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 59.788489] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. [ 65.675986] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/05 15:54:16 fuzzer started [ 70.258251] random: cc1: uninitialized urandom read (8 bytes read) [ 70.417606] cc1 (6235) used greatest stack depth: 53184 bytes left 2018/10/05 15:54:21 dialing manager at 10.128.0.26:36867 2018/10/05 15:54:21 syscalls: 1 2018/10/05 15:54:21 code coverage: enabled 2018/10/05 15:54:21 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/05 15:54:21 setuid sandbox: enabled 2018/10/05 15:54:21 namespace sandbox: enabled 2018/10/05 15:54:21 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/05 15:54:21 fault injection: enabled 2018/10/05 15:54:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/05 15:54:21 net packed injection: enabled 2018/10/05 15:54:21 net device setup: enabled [ 75.585228] random: crng init done 15:56:24 executing program 0: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) sendfile(r0, r0, &(0x7f0000b58000), 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) [ 196.579794] IPVS: ftp: loaded support on port[0] = 21 [ 198.879279] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.885901] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.894500] device bridge_slave_0 entered promiscuous mode [ 199.036700] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.043315] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.051818] device bridge_slave_1 entered promiscuous mode [ 199.187332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.325171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 15:56:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xc, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000740)="e0345c7d9fbef9104f927fc8dcf774ff3a7b8c19a245528f60932e30219d9d2806326a2fe7a133", &(0x7f00000000c0)=""/73}, 0x18) clock_gettime(0x0, &(0x7f0000000640)) [ 199.745767] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.036917] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.346223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.353416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.429631] IPVS: ftp: loaded support on port[0] = 21 [ 200.668080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.675339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.358312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.366516] team0: Port device team_slave_0 added [ 201.670353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.678588] team0: Port device team_slave_1 added [ 201.930334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.937604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.946781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.145896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.153162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.162214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.394105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.402247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.411254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.626457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.634261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.643529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.485346] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.491892] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.500237] device bridge_slave_0 entered promiscuous mode 15:56:33 executing program 2: r0 = gettid() ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000001c0)) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) write$smack_current(0xffffffffffffffff, &(0x7f00000002c0)='big_key\x00', 0x8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0x0) [ 204.823803] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.830274] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.838904] device bridge_slave_1 entered promiscuous mode [ 205.144811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 205.404862] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.411353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.418409] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.424926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.433838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.447177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 205.671460] IPVS: ftp: loaded support on port[0] = 21 [ 206.191179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.421804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.562857] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.873048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 206.880412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.159458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.166594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.109280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.117513] team0: Port device team_slave_0 added [ 208.348122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.356255] team0: Port device team_slave_1 added [ 208.677243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.684376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.693325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.913000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.920067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.929031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.246782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.254576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.263669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.573899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.581482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.590671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.987208] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.993853] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.002269] device bridge_slave_0 entered promiscuous mode [ 210.328231] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.334854] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.343237] device bridge_slave_1 entered promiscuous mode [ 210.579840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.808929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.612641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.937239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.192405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.199470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.467490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 212.474666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.555072] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.561654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.568547] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.575070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.584328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 15:56:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x600210) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000280)) sendmmsg(r1, &(0x7f0000008940)=[{{&(0x7f0000007c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008340), 0x0, &(0x7f00000013c0)=ANY=[]}}], 0x1, 0x20000000) readv(r0, &(0x7f0000008bc0), 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)=@updpolicy={0x120, 0x19, 0x0, 0x70bd29, 0x25dfdbfc, {{@in=@broadcast, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0x9, 0x0, 0xa0, 0xa0, 0x0, 0x0, r2}, {0x7bc, 0x9cc7, 0x1000, 0x1, 0x0, 0x4, 0x4fc0, 0xe7f7}, {0x0, 0x7ff, 0x8000}, 0x2cd, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, [@lifetime_val={0x24, 0x9, {0x3f, 0x8001, 0x0, 0xffff}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e23, @in6=@loopback}}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0xffffffffffffffe7, @in6=@mcast2, 0x0, 0x0, 0x200}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) [ 212.602840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.453551] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.461517] team0: Port device team_slave_0 added [ 213.748849] IPVS: ftp: loaded support on port[0] = 21 [ 213.773272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.781277] team0: Port device team_slave_1 added [ 214.120593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 214.127897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.136844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.488119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 214.495388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.504359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.909779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.918136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.927266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.338091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.345824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.355184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.251945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.381879] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.388351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.395386] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.401901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.410575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.656334] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.663139] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.671787] device bridge_slave_0 entered promiscuous mode [ 219.704875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.782014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.104453] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.110932] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.119496] device bridge_slave_1 entered promiscuous mode [ 220.498806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.838429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.973385] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.979722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.987828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.959007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.247097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.379952] 8021q: adding VLAN 0 to HW filter on device team0 15:56:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') [ 222.649279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.656531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.037186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.044410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.861094] IPVS: ftp: loaded support on port[0] = 21 [ 224.237063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.245250] team0: Port device team_slave_0 added [ 224.602157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.610181] team0: Port device team_slave_1 added [ 225.086006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.093216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.102252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.520600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.527786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.536798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.978700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.986535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.995628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.393966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.401833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.410781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.819566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.380781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.727403] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.733997] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.742459] device bridge_slave_0 entered promiscuous mode [ 230.913353] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.919747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.928044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.126165] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.132979] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.141438] device bridge_slave_1 entered promiscuous mode [ 231.236365] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.242993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.249909] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.256512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.265378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.594163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.751900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.951313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.485426] 8021q: adding VLAN 0 to HW filter on device team0 15:57:01 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000280)=0x21b) sendmmsg(r1, &(0x7f0000008940)=[{{&(0x7f0000007c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008340), 0x0, &(0x7f00000013c0)=ANY=[]}}], 0x1, 0x20000000) readv(0xffffffffffffffff, &(0x7f0000008bc0), 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x4) listen(0xffffffffffffffff, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)=@updpolicy={0xf8, 0x19, 0x0, 0x70bd29, 0x25dfdbfc, {{@in=@broadcast, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa0, 0x0, 0x0, r3}, {0x0, 0x9cc7, 0x1000, 0x1, 0x0, 0x4, 0x4fc0, 0xe7f7}, {0x0, 0x7ff, 0x8000}, 0x2cd, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, [@lifetime_val={0x24, 0x9, {0x3f, 0x8001, 0x8, 0xffff}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e23, @in6=@loopback}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x4048090}, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) [ 232.904588] hrtimer: interrupt took 53037 ns [ 233.174569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.154988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.445076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.452283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 15:57:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x7, 0x10}, 0xc) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9) [ 234.911030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.918228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 15:57:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x7fff) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000180)={0x6, 0xfffffffffffffffe, 0x390, 0xffffffffffffeffd, 0x8, 0x83}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000280)=""/216) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f00000001c0)={{0xfffffffffffffffd, 0x1}}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xfffffffffffffff9, 0x3f, 0x1, 0xfffffffffffffff7}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) 15:57:04 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x408401, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x80000001, 0xfffffffffffffff7, &(0x7f00000000c0)="8d6fd374dfbd956d9243bebbafe96c928564987a08e059c87e0b5484ef003a378f7e5e4d723d43f1d91ddfafed10843bf3f40af4feff778825ee4f24ef42526dc371", 0x5, 0x7fff, 0xc34, 0xffffffffffffffff, 0x5, 0x6, 0x5, "ba358243e201f337fb57111c8b3ba10efda162bd3a05df5a9ee2e6652da0ca1aee748eb35744fdd1ed7b9ea0dee39c3e6c99accaf33b72597f204210f309314db77c3be6138224e0b4a06a7ccf54b409207487f4d060c0adcc7f8ed2ed3a74dea6563368ba7d841e8ba84a690489d4db33fdbf8f48493e4a40055e0baa6c96"}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x9, 0x35a, 0x0, 0x4, 0x17}, 0x14) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x80000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x2) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000300)) write$FUSE_WRITE(r0, &(0x7f0000000340)={0x18, 0x0, 0x1, {0xfffffffffffffffe}}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="656f2748f7fd970afea16c005cfd152a58f16c0064a5cc641b5648c290e26c7cf24299cdec0ceeb9b5b8dd75d6845c278d2d68c958", 0x35) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) listen(r1, 0xc1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e23}], 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000540)={0x4, [0x2, 0x7, 0x8, 0x8]}, &(0x7f0000000580)=0xc) r3 = syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0xfff, 0x400000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000600), &(0x7f0000000640)=0xc) ioctl$TIOCSTI(r3, 0x5412, 0x100000001) ioctl$RTC_PIE_ON(r3, 0x7005) shutdown(r0, 0x0) fcntl$addseals(r0, 0x409, 0xc) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000680)=0x82) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000700)={0x44, 0x7fffffff, 0xff8, "5f495fbb70c3ce31a5a90af542dccdffc64da458bb9d42f660e6996084f36c7f4e9c8cbec257cb7e88c37480a9cd9b0ac2e797c76128256e392cf37bd950089030135969"}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000780)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000007c0)={0x7b, 0x0, [0x3, 0x6, 0x6, 0x5484]}) fadvise64(r3, 0x0, 0x4, 0x1) write$UHID_INPUT2(r0, &(0x7f0000000840)={0xc, 0x1000, "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"}, 0x1006) ioctl$VT_RELDISP(r1, 0x5605) 15:57:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) [ 236.118791] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.127016] team0: Port device team_slave_0 added 15:57:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80000000000042) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDDISABIO(r1, 0x40096102) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) [ 236.460489] QAT: failed to copy from user cfg_data. [ 236.580244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.588452] team0: Port device team_slave_1 added 15:57:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000180)='attr/current\x00') r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="ad1d86be0f090f01d1440f20c066350e000000440f22c00f01cbbaf80c66b8a06c928066efbafc0c66ed0f01f4650f080f97af0000", 0x35}], 0x1, 0x0, &(0x7f0000000180), 0x0) [ 236.907655] IPVS: ftp: loaded support on port[0] = 21 [ 236.933731] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 237.043453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.052194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.059196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.067999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.102571] ================================================================== [ 237.109990] BUG: KMSAN: uninit-value in loaded_vmcs_init+0x343/0x590 [ 237.116502] CPU: 1 PID: 7128 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #63 [ 237.123694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.133055] Call Trace: [ 237.135656] [ 237.137827] dump_stack+0x306/0x460 [ 237.141479] ? loaded_vmcs_init+0x343/0x590 [ 237.145837] kmsan_report+0x1a3/0x2d0 [ 237.149668] __msan_warning+0x7c/0xe0 [ 237.153496] loaded_vmcs_init+0x343/0x590 [ 237.157672] __loaded_vmcs_clear+0x2fb/0x3c0 [ 237.162124] flush_smp_call_function_queue+0x404/0x770 [ 237.167417] ? vmx_get_msr_feature+0x180/0x180 [ 237.172029] generic_smp_call_function_single_interrupt+0x1f/0x30 [ 237.178282] smp_call_function_single_interrupt+0x2f7/0x530 [ 237.184017] call_function_single_interrupt+0xf/0x20 [ 237.189126] [ 237.191387] RIP: 0010:finish_lock_switch+0x2b/0x40 [ 237.196334] Code: 48 89 e5 53 48 89 fb e8 13 a1 9a 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 bd 95 9a 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 0e a0 9a 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 [ 237.215248] RSP: 0018:ffff88013f3cfc68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff04 [ 237.222979] RAX: ffff8801dcbb4c00 RBX: ffff8801d1519e00 RCX: ffff8801dcbb5c00 [ 237.230258] RDX: ffff8801dcbb5c00 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbf2560 [ 237.237536] RBP: ffff88013f3cfc68 R08: ffffffff7fffffff R09: 0000000000000000 [ 237.244816] R10: 0000000000000000 R11: ffffffff81ca6810 R12: ffff880145479e00 [ 237.252110] R13: ffff88021fdba590 R14: ffff88014547a788 R15: ffff88021fdb9c00 [ 237.259411] ? perf_pmu_nop_int+0x30/0x30 [ 237.263593] finish_task_switch+0x106/0x340 [ 237.267941] __schedule+0x80f/0x9b0 [ 237.271597] schedule+0x1cc/0x300 [ 237.275583] prepare_exit_to_usermode+0x1ec/0x470 [ 237.280452] syscall_return_slowpath+0x112/0x880 [ 237.285262] do_syscall_64+0xe4/0x100 [ 237.289092] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.294295] RIP: 0033:0x457579 [ 237.297501] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.316761] RSP: 002b:00007f070c2dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 237.324488] RAX: 0000000000000007 RBX: 0000000000000005 RCX: 0000000000457579 [ 237.331765] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 237.339042] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.346330] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f070c2db6d4 [ 237.353610] R13: 00000000004c2f90 R14: 00000000004d4818 R15: 00000000ffffffff [ 237.360909] [ 237.362547] Local variable description: ----error.i@loaded_vmcs_init [ 237.369035] Variable was created at: [ 237.372772] loaded_vmcs_init+0x8a/0x590 [ 237.376863] __loaded_vmcs_clear+0x2fb/0x3c0 [ 237.381286] ================================================================== [ 237.388647] Disabling lock debugging due to kernel taint [ 237.394124] Kernel panic - not syncing: panic_on_warn set ... [ 237.394124] [ 237.401507] CPU: 1 PID: 7128 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #63 [ 237.410097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.419456] Call Trace: [ 237.422049] [ 237.424241] dump_stack+0x306/0x460 [ 237.427907] panic+0x54c/0xafa [ 237.431168] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 237.436638] kmsan_report+0x2cd/0x2d0 [ 237.440465] __msan_warning+0x7c/0xe0 [ 237.444292] loaded_vmcs_init+0x343/0x590 [ 237.448471] __loaded_vmcs_clear+0x2fb/0x3c0 [ 237.452912] flush_smp_call_function_queue+0x404/0x770 [ 237.458203] ? vmx_get_msr_feature+0x180/0x180 [ 237.462817] generic_smp_call_function_single_interrupt+0x1f/0x30 [ 237.469082] smp_call_function_single_interrupt+0x2f7/0x530 [ 237.474816] call_function_single_interrupt+0xf/0x20 [ 237.479933] [ 237.482192] RIP: 0010:finish_lock_switch+0x2b/0x40 [ 237.487137] Code: 48 89 e5 53 48 89 fb e8 13 a1 9a 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 bd 95 9a 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 0e a0 9a 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 [ 237.506049] RSP: 0018:ffff88013f3cfc68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff04 [ 237.513785] RAX: ffff8801dcbb4c00 RBX: ffff8801d1519e00 RCX: ffff8801dcbb5c00 [ 237.521063] RDX: ffff8801dcbb5c00 RSI: aaaaaaaaaaaab000 RDI: ffffea000cbf2560 [ 237.528360] RBP: ffff88013f3cfc68 R08: ffffffff7fffffff R09: 0000000000000000 [ 237.535643] R10: 0000000000000000 R11: ffffffff81ca6810 R12: ffff880145479e00 [ 237.543015] R13: ffff88021fdba590 R14: ffff88014547a788 R15: ffff88021fdb9c00 [ 237.550318] ? perf_pmu_nop_int+0x30/0x30 [ 237.554500] finish_task_switch+0x106/0x340 [ 237.558856] __schedule+0x80f/0x9b0 [ 237.562512] schedule+0x1cc/0x300 [ 237.565992] prepare_exit_to_usermode+0x1ec/0x470 [ 237.570868] syscall_return_slowpath+0x112/0x880 [ 237.575677] do_syscall_64+0xe4/0x100 [ 237.579502] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.584709] RIP: 0033:0x457579 [ 237.587920] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.606847] RSP: 002b:00007f070c2dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 237.614577] RAX: 0000000000000007 RBX: 0000000000000005 RCX: 0000000000457579 [ 237.621871] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 237.629150] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.636432] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f070c2db6d4 [ 237.643726] R13: 00000000004c2f90 R14: 00000000004d4818 R15: 00000000ffffffff [ 237.652033] Kernel Offset: disabled [ 237.655680] Rebooting in 86400 seconds..