[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.182644][ T26] audit: type=1800 audit(1548907371.742:25): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.220702][ T26] audit: type=1800 audit(1548907371.742:26): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.251992][ T26] audit: type=1800 audit(1548907371.742:27): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. 2019/01/31 04:03:03 fuzzer started 2019/01/31 04:03:06 dialing manager at 10.128.0.26:43669 2019/01/31 04:03:06 syscalls: 1 2019/01/31 04:03:06 code coverage: enabled 2019/01/31 04:03:06 comparison tracing: enabled 2019/01/31 04:03:06 extra coverage: extra coverage is not supported by the kernel 2019/01/31 04:03:06 setuid sandbox: enabled 2019/01/31 04:03:06 namespace sandbox: enabled 2019/01/31 04:03:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/31 04:03:06 fault injection: enabled 2019/01/31 04:03:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/31 04:03:06 net packet injection: enabled 2019/01/31 04:03:06 net device setup: enabled 04:06:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x8080400}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syzkaller login: [ 243.970155][ T8189] IPVS: ftp: loaded support on port[0] = 21 04:06:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) [ 244.086332][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 244.178154][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.195384][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.219646][ T8189] device bridge_slave_0 entered promiscuous mode [ 244.244691][ T8192] IPVS: ftp: loaded support on port[0] = 21 [ 244.251808][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.259012][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.271979][ T8189] device bridge_slave_1 entered promiscuous mode 04:06:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000003580)={0x1c, 0x40000000001a, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x0, [@generic='gZ']}]}, 0x1c}}, 0x0) [ 244.324469][ T8189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.350802][ T8189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.434223][ T8189] team0: Port device team_slave_0 added [ 244.466240][ T8189] team0: Port device team_slave_1 added [ 244.519860][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 244.581685][ T8189] device hsr_slave_0 entered promiscuous mode 04:06:12 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x18240, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0xffffffffffffffb8) socket$unix(0x1, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) fchmod(0xffffffffffffffff, 0x0) close(r0) socketpair(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) lstat(0x0, 0x0) getuid() getegid() ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 244.628542][ T8189] device hsr_slave_1 entered promiscuous mode [ 244.762482][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.772148][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.780749][ T8192] device bridge_slave_0 entered promiscuous mode [ 244.791356][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.794162][ T8196] IPVS: ftp: loaded support on port[0] = 21 [ 244.798522][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.814912][ T8192] device bridge_slave_1 entered promiscuous mode [ 244.847954][ T8192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.861381][ T8192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.890082][ T8198] IPVS: ftp: loaded support on port[0] = 21 [ 244.904625][ T8192] team0: Port device team_slave_0 added [ 244.921571][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.928825][ T8189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.936522][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.943643][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.954621][ T8192] team0: Port device team_slave_1 added 04:06:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) [ 245.124658][ T8192] device hsr_slave_0 entered promiscuous mode 04:06:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023e, 0x0) [ 245.298537][ T8192] device hsr_slave_1 entered promiscuous mode [ 245.368770][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.386938][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.405109][ T8204] IPVS: ftp: loaded support on port[0] = 21 [ 245.405128][ T8202] IPVS: ftp: loaded support on port[0] = 21 [ 245.520308][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 245.543151][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.625734][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 245.671478][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.678916][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.686574][ T8196] device bridge_slave_0 entered promiscuous mode [ 245.698114][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.706075][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.714585][ T8196] device bridge_slave_1 entered promiscuous mode [ 245.745190][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.754441][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.776916][ T8196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.835998][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.847089][ T8196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.926507][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.935093][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.943461][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.950504][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.957946][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.966570][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.974921][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.981978][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.993847][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.002347][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.011092][ T8198] device bridge_slave_0 entered promiscuous mode [ 246.019248][ T8196] team0: Port device team_slave_0 added [ 246.025056][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.032740][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.040647][ T8198] device bridge_slave_1 entered promiscuous mode [ 246.054468][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 246.084947][ T8196] team0: Port device team_slave_1 added [ 246.096483][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 246.135827][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.143101][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.151224][ T8202] device bridge_slave_0 entered promiscuous mode [ 246.159034][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.166082][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.174223][ T8202] device bridge_slave_1 entered promiscuous mode [ 246.192215][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.201917][ T8198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.223985][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.242006][ T8198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.321708][ T8196] device hsr_slave_0 entered promiscuous mode [ 246.358686][ T8196] device hsr_slave_1 entered promiscuous mode [ 246.428660][ T8202] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.460814][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.470165][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.479627][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.487867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.496607][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.506700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.519530][ T8198] team0: Port device team_slave_0 added [ 246.527156][ T8202] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.547944][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.555690][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.563839][ T8204] device bridge_slave_0 entered promiscuous mode [ 246.571393][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.581013][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.596212][ T8198] team0: Port device team_slave_1 added [ 246.617331][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.625467][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.633078][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.641221][ T8204] device bridge_slave_1 entered promiscuous mode [ 246.648402][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.656730][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.665319][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.673039][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.717856][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.770049][ T8198] device hsr_slave_0 entered promiscuous mode [ 246.828437][ T8198] device hsr_slave_1 entered promiscuous mode [ 246.887293][ T8204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.897074][ T8202] team0: Port device team_slave_0 added [ 246.904543][ T8202] team0: Port device team_slave_1 added [ 246.937109][ T8204] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.974197][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.983486][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.992017][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.999120][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.006613][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.015548][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.023926][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.030998][ T8208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.039268][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.048044][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.110836][ T8202] device hsr_slave_0 entered promiscuous mode [ 247.158540][ T8202] device hsr_slave_1 entered promiscuous mode [ 247.222518][ T8204] team0: Port device team_slave_0 added [ 247.230053][ T8204] team0: Port device team_slave_1 added [ 247.237663][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.264381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.273194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.282313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.291104][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.299979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.308102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.316338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.340656][ T8192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.353331][ T8192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.364162][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.383404][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.392164][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.450859][ T8204] device hsr_slave_0 entered promiscuous mode [ 247.509621][ T8204] device hsr_slave_1 entered promiscuous mode [ 247.568810][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.695723][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.714490][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 04:06:15 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d, 0x0, 0xa}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) [ 247.745251][ T8217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.825710][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.838073][ T8222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.865649][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 04:06:15 executing program 0: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r1) [ 247.877221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.890606][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.908646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.916388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.937025][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.956980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.966490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.975467][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.982579][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.991164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.999867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.008304][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.015380][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.023028][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 04:06:15 executing program 1: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) [ 248.031775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.039557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.051813][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.060285][ T8204] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.073206][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.090617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.099232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.112700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.142659][ C1] hrtimer: interrupt took 44747 ns [ 248.145518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.161696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.176741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:06:15 executing program 0: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) close(r1) [ 248.195505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.206470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.233014][ T8233] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 248.287922][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.304872][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.321952][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.331031][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.331072][ T8199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.331567][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.352868][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.372468][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.379617][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.402846][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.425961][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.437165][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.444283][ T8199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.459243][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.477637][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.487698][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.494846][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state 04:06:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}}], 0x0, 0x0, &(0x7f0000000240)}) [ 248.513650][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.539342][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:06:16 executing program 1: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) [ 248.568984][ T8246] binder: 8245:8246 transaction failed 29189/-22, size -7-0 line 2903 [ 248.574335][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.600326][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.615277][ T8250] binder_alloc: binder_alloc_mmap_handler: 8245 20001000-20002000 already mapped failed -16 [ 248.626318][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.633421][ T8199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.646271][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.647548][ T8200] binder: undelivered TRANSACTION_ERROR: 29189 04:06:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 248.675116][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.702772][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.709935][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.747529][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.768983][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.798548][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.807107][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.822538][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 04:06:16 executing program 1: seccomp(0x400000000001, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 248.856803][ T8204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.878350][ T8204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.895902][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.976080][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.993833][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.006590][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.017312][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.034130][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.043489][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.052735][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.061554][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.070279][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.079118][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.087491][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.095802][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.104258][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.113060][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.121415][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.129940][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.140443][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.148978][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.157119][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.182220][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.194961][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.209554][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.217193][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.225282][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.233105][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.241480][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.249849][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.258524][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.266890][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.275871][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.289445][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.321351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.330141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.338606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.346749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.358054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.366353][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.379843][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.394427][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.430013][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.512785][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 04:06:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) creat(&(0x7f0000000380)='./file0\x00', 0x8) shmdt(0x0) 04:06:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) 04:06:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) 04:06:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000116, 0x0) 04:06:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) tkill(r1, 0x14) fchdir(r0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) clone(0x16102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 04:06:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x8}, 0x0) [ 249.828842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 249.834807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 249.848365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 249.854219][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x168, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1fc, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 04:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 04:06:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) chown(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 04:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xde0) ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000000)) 04:06:17 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x200000b9) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x2000000012, r0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) 04:06:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000001a00)='X', 0x1, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x14) 04:06:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) dup3(r0, r1, 0x0) 04:06:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28) 04:06:17 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) getpid() [ 250.332904][ T8334] sctp: failed to load transform for md5: -2 04:06:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\xf3x\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') ioctl$EXT4_IOC_MIGRATE(r1, 0x541b) 04:06:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x10000000, 0x0}) 04:06:18 executing program 5: r0 = socket$inet(0xa, 0x4000000801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000007ff) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x13, &(0x7f0000000000), 0x4) [ 250.519155][ T8358] binder_alloc: 8356: binder_alloc_buf, no vma [ 250.561907][ T8358] binder: 8356:8358 transaction failed 29189/-3, size 0-0 line 3056 [ 250.599896][ T8358] binder: BINDER_SET_CONTEXT_MGR already set [ 250.615919][ T8360] binder_alloc: 8356: binder_alloc_buf, no vma [ 250.633403][ T8358] binder: 8356:8358 ioctl 40046207 0 returned -16 [ 250.648655][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 250.655254][ T8360] binder: 8356:8360 transaction failed 29189/-3, size 0-0 line 3056 [ 250.701272][ T22] binder: undelivered TRANSACTION_ERROR: 29189 04:06:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20}, 0x20}}, 0x0) 04:06:18 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) 04:06:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 250.884867][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 04:06:18 executing program 0: mknod(&(0x7f0000000240)='./bus\x00', 0x80008007, 0x5dc2) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 04:06:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0x0, 0xfffffffffffffff7, 0x4}) 04:06:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 04:06:18 executing program 2: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x832, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) socket$packet(0x11, 0x1000000000000000, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0xc08, 0x0, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd8aa305eb7ab5168, 0x0, 0x2, 0xfff, 0x35, 0xffffffffffffffff, 0x9}, 0x2c) dup(r2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) semget(0x0, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 04:06:18 executing program 1: r0 = socket$inet(0xa, 0x4000000801, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x2df}, &(0x7f0000000080)=0x8) 04:06:18 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x4, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xff, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$unix(r2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380), 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) [ 251.409748][ T8396] BUG: unable to handle kernel paging request at ffffffffffffffea [ 251.417586][ T8396] #PF error: [normal kernel read fault] [ 251.423136][ T8396] PGD 9874067 P4D 9874067 PUD 9876067 PMD 0 [ 251.429158][ T8396] Oops: 0000 [#1] PREEMPT SMP KASAN [ 251.434365][ T8396] CPU: 1 PID: 8396 Comm: syz-executor5 Not tainted 5.0.0-rc4-next-20190130 #22 [ 251.443305][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.453514][ T8396] RIP: 0010:dput+0x11e/0x790 [ 251.458105][ T8396] Code: e8 97 2e a8 ff 45 84 ed 0f 84 e2 03 00 00 e8 49 2d a8 ff 4c 89 e0 48 c1 e8 03 0f b6 04 18 84 c0 74 08 3c 03 0f 8e f7 04 00 00 <45> 8b 2c 24 4d 8d bc 24 80 00 00 00 31 ff 41 83 e5 08 44 89 ee e8 [ 251.478187][ T8396] RSP: 0018:ffff88805817f7c0 EFLAGS: 00010246 [ 251.484266][ T8396] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90010880000 [ 251.492241][ T8396] RDX: 0000000000000826 RSI: ffffffff81d9ec07 RDI: 0000000000000001 [ 251.500212][ T8396] RBP: ffff88805817f858 R08: ffff888087b06440 R09: ffffed1015ce5b80 [ 251.508178][ T8396] R10: ffffed1015ce5b7f R11: ffff8880ae72dbfb R12: ffffffffffffffea [ 251.516174][ T8396] R13: 0000000000000001 R14: 1ffff1100b02fefa R15: ffff88805817f920 [ 251.524169][ T8396] FS: 00007f7413e07700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 251.533107][ T8396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.539692][ T8396] CR2: ffffffffffffffea CR3: 00000000a77cd000 CR4: 00000000001426e0 [ 251.547682][ T8396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.555659][ T8396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.563633][ T8396] Call Trace: [ 251.567027][ T8396] ? relay_open_buf.part.0+0xb40/0xb40 [ 251.572492][ T8396] ? shrink_dcache_sb+0x340/0x340 [ 251.577555][ T8396] ? debugfs_create_file+0x5a/0x70 [ 251.582732][ T8396] do_blk_trace_setup+0x8e9/0xdb0 [ 251.587765][ T8396] ? blk_tracer_print_line+0x60/0x60 [ 251.593054][ T8396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.599340][ T8396] ? _copy_from_user+0xdd/0x150 [ 251.604200][ T8396] __blk_trace_setup+0xe3/0x190 [ 251.609055][ T8396] ? do_blk_trace_setup+0xdb0/0xdb0 [ 251.614320][ T8396] ? retint_kernel+0x2d/0x2d [ 251.618918][ T8396] blk_trace_setup+0x4f/0x70 [ 251.623581][ T8396] sg_ioctl+0x392/0x2f40 [ 251.627838][ T8396] ? sg_new_write.isra.0+0xa70/0xa70 [ 251.633132][ T8396] ? __fget+0x482/0x710 [ 251.637299][ T8396] ? __fget+0x49a/0x710 [ 251.641460][ T8396] ? ksys_dup3+0x660/0x660 [ 251.645929][ T8396] ? lock_release+0xc40/0xc40 [ 251.650609][ T8396] ? sg_new_write.isra.0+0xa70/0xa70 [ 251.655895][ T8396] do_vfs_ioctl+0x107b/0x17d0 [ 251.660577][ T8396] ? ioctl_preallocate+0x2f0/0x2f0 [ 251.665707][ T8396] ? __fget_light+0x2db/0x420 [ 251.670391][ T8396] ? fget_raw+0x20/0x20 [ 251.674583][ T8396] ? put_timespec64+0x115/0x1b0 [ 251.679438][ T8396] ? nsecs_to_jiffies+0x30/0x30 [ 251.684338][ T8396] ? do_syscall_64+0x8c/0x800 [ 251.689033][ T8396] ? do_syscall_64+0x8c/0x800 [ 251.693721][ T8396] ? lockdep_hardirqs_on+0x418/0x5d0 [ 251.699038][ T8396] ? security_file_ioctl+0x93/0xc0 [ 251.704166][ T8396] ksys_ioctl+0xab/0xd0 [ 251.708331][ T8396] __x64_sys_ioctl+0x73/0xb0 [ 251.712925][ T8396] do_syscall_64+0x1a3/0x800 [ 251.717528][ T8396] ? syscall_return_slowpath+0x5f0/0x5f0 [ 251.723172][ T8396] ? prepare_exit_to_usermode+0x232/0x3b0 [ 251.728899][ T8396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.734449][ T8396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.740341][ T8396] RIP: 0033:0x458089 [ 251.744239][ T8396] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.763839][ T8396] RSP: 002b:00007f7413e06c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.772246][ T8396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089 [ 251.780217][ T8396] RDX: 0000000020000180 RSI: 00000000c0481273 RDI: 0000000000000004 [ 251.788189][ T8396] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 251.796161][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7413e076d4 [ 251.804179][ T8396] R13: 00000000004bf54d R14: 00000000004d0e38 R15: 00000000ffffffff [ 251.812149][ T8396] Modules linked in: [ 251.816044][ T8396] CR2: ffffffffffffffea [ 251.820216][ T8396] ---[ end trace 7a13389294702c70 ]--- [ 251.825724][ T8396] RIP: 0010:dput+0x11e/0x790 [ 251.830320][ T8396] Code: e8 97 2e a8 ff 45 84 ed 0f 84 e2 03 00 00 e8 49 2d a8 ff 4c 89 e0 48 c1 e8 03 0f b6 04 18 84 c0 74 08 3c 03 0f 8e f7 04 00 00 <45> 8b 2c 24 4d 8d bc 24 80 00 00 00 31 ff 41 83 e5 08 44 89 ee e8 [ 251.849918][ T8396] RSP: 0018:ffff88805817f7c0 EFLAGS: 00010246 [ 251.856014][ T8396] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90010880000 [ 251.863997][ T8396] RDX: 0000000000000826 RSI: ffffffff81d9ec07 RDI: 0000000000000001 [ 251.871964][ T8396] RBP: ffff88805817f858 R08: ffff888087b06440 R09: ffffed1015ce5b80 [ 251.879933][ T8396] R10: ffffed1015ce5b7f R11: ffff8880ae72dbfb R12: ffffffffffffffea [ 251.887905][ T8396] R13: 0000000000000001 R14: 1ffff1100b02fefa R15: ffff88805817f920 [ 251.895881][ T8396] FS: 00007f7413e07700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 251.904807][ T8396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.911392][ T8396] CR2: ffffffffffffffea CR3: 00000000a77cd000 CR4: 00000000001426e0 [ 251.918348][ T8405] kobject: 'kvm' (000000008acd7e8e): kobject_uevent_env [ 251.919375][ T8396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.919384][ T8396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.919393][ T8396] Kernel panic - not syncing: Fatal exception [ 251.927300][ T8396] Kernel Offset: disabled [ 251.953515][ T8396] Rebooting in 86400 seconds..