last executing test programs: 308.045231ms ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 286.807923ms ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 281.487704ms ago: executing program 4 (id=5): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 228.121189ms ago: executing program 2 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) unshare(0x22020400) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 227.988279ms ago: executing program 1 (id=10): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 227.808629ms ago: executing program 1 (id=11): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000880)={0x0, 0x0, 0x1, 0x24e9, "007cc1ffffffffffff0000f62386f0dfdf293700"}) 219.932429ms ago: executing program 1 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) listen(r0, 0x9) 210.51292ms ago: executing program 1 (id=13): r0 = socket(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\b'], 0x30}}], 0x2, 0x0) 144.046257ms ago: executing program 1 (id=14): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001428) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) 143.745426ms ago: executing program 3 (id=15): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x70}}, 0x0) 120.891188ms ago: executing program 3 (id=16): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b800000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00trans=fd,\x00'/52], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 85.265472ms ago: executing program 0 (id=1): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 64.459364ms ago: executing program 3 (id=17): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000300)="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", 0xfff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 64.255824ms ago: executing program 0 (id=18): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="0f20d865660f29cc0f22d80faea5e0000f4d130fc77d00660f3a0ed05166b9b20b000066b8224f000066ba000000000f3066b9e00200000f320f01c2670f01bc55007000000f2096", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 63.197134ms ago: executing program 4 (id=19): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x0, 0x4, 0xfffffffffffffe0b}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x12ca589fdb765487, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2, 0x12, "ff00f70000000000830a0000af88008300"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 0s ago: executing program 1 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b00)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x7, 0x0, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040), 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000800)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, 0x5, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005580)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x10}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x2, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 21.073814][ T23] audit: type=1400 audit(1720020382.879:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.075236][ T342] cgroup1: Unknown subsys name 'net' [ 21.096259][ T23] audit: type=1400 audit(1720020382.879:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.101547][ T342] cgroup1: Unknown subsys name 'net_prio' [ 21.129110][ T342] cgroup1: Unknown subsys name 'devices' [ 21.135226][ T23] audit: type=1400 audit(1720020382.939:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.238803][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 21.244486][ T342] cgroup1: Unknown subsys name 'rlimit' [ 21.250209][ T23] audit: type=1400 audit(1720020383.059:69): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 21.397288][ T23] audit: type=1400 audit(1720020383.209:70): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.420344][ T23] audit: type=1400 audit(1720020383.209:71): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.438548][ T343] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.445118][ T23] audit: type=1400 audit(1720020383.209:72): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.476422][ T23] audit: type=1400 audit(1720020383.269:73): avc: denied { relabelto } for pid=343 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.501592][ T23] audit: type=1400 audit(1720020383.269:74): avc: denied { write } for pid=343 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.501817][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.526975][ T23] audit: type=1400 audit(1720020383.269:75): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.860686][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.867741][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.874882][ T352] device bridge_slave_0 entered promiscuous mode [ 21.895254][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.902233][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.909546][ T350] device bridge_slave_0 entered promiscuous mode [ 21.916028][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.922843][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.930179][ T352] device bridge_slave_1 entered promiscuous mode [ 21.946815][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.953723][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.961363][ T350] device bridge_slave_1 entered promiscuous mode [ 22.007021][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.013846][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.021407][ T354] device bridge_slave_0 entered promiscuous mode [ 22.028194][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.035009][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.042355][ T354] device bridge_slave_1 entered promiscuous mode [ 22.102987][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.110199][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.117504][ T351] device bridge_slave_0 entered promiscuous mode [ 22.136665][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.143487][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.150782][ T351] device bridge_slave_1 entered promiscuous mode [ 22.166383][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.173199][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.180515][ T353] device bridge_slave_0 entered promiscuous mode [ 22.187419][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.194238][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.201645][ T353] device bridge_slave_1 entered promiscuous mode [ 22.353519][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.360363][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.367631][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.374356][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.389600][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.396434][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.403534][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.410332][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.419011][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.425827][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.432965][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.439725][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.490825][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.497667][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.504768][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.511560][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.538683][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.545922][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.552936][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.560197][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.567797][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.574695][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.581614][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.589164][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.597214][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.627452][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.635376][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.642208][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.649756][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.656991][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.690168][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.698010][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.707250][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.714054][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.721410][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.729729][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.736554][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.743734][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.751723][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758536][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.765655][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.773677][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.780498][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.787848][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.795528][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.816667][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.824539][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.832594][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.840452][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.847788][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.865885][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.873949][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.882158][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.889851][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.926940][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.935127][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.943355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.950188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.958448][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.966701][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.974595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981341][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.988469][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.996574][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.004445][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.011216][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.018425][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.026552][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.034424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.041192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.048385][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.056309][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.063952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.071827][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.079756][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.087875][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.111114][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.118992][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.127372][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.135401][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.143806][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.151865][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.159777][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.167639][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.175245][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.182964][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.191018][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.232780][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.244837][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.245288][ T377] [ 23.253332][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.255401][ T377] ********************************************************** [ 23.264506][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.270039][ T377] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 23.278761][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.285408][ T377] ** ** [ 23.293579][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.300234][ T377] ** trace_printk() being used. Allocating extra memory. ** [ 23.308176][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.315106][ T377] ** ** [ 23.323212][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.329817][ T377] ** This means that this is a DEBUG kernel and it is ** [ 23.339255][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.344945][ T377] ** unsafe for production use. ** [ 23.352959][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.359642][ T377] ** ** [ 23.367779][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.382120][ T377] ** If you see this message and you are not debugging ** [ 23.382571][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.389576][ T377] ** the kernel, report this immediately to your vendor! ** [ 23.404216][ T377] ** ** [ 23.411564][ T377] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 23.419058][ T377] ********************************************************** [ 23.443839][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.452164][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.459956][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.468180][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.476376][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.484436][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.492770][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.500796][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.508797][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.516905][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.524947][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.533257][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.541503][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.549630][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.557801][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.565746][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.588452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.597332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.605687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.615103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.624170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.632514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.701917][ T391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.735203][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.744843][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.774024][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.786526][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.802145][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.810278][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.870840][ T414] incfs_lookup_dentry err:-14 [ 23.875325][ T414] incfs: Can't find or create .incomplete dir in ./file0 [ 23.883015][ T414] incfs: mount failed -14 [ 23.899458][ T389] syz.4.5 (389) used greatest stack depth: 21368 bytes left [ 23.945889][ T418] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 23.953508][ T418] #PF: supervisor instruction fetch in kernel mode [ 23.959842][ T418] #PF: error_code(0x0010) - not-present page [ 23.965654][ T418] PGD 1f0bff067 P4D 1f0bff067 PUD 1f0bf6067 PMD 0 [ 23.971996][ T418] Oops: 0010 [#1] PREEMPT SMP KASAN [ 23.977038][ T418] CPU: 1 PID: 418 Comm: syz.0.18 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 23.986402][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 23.996317][ T418] RIP: 0010:0x86 [ 23.999683][ T418] Code: Bad RIP value. [ 24.003586][ T418] RSP: 0018:ffff8881eea2f308 EFLAGS: 00010086 [ 24.009487][ T418] RAX: ffff8881eea2f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 24.017302][ T418] RDX: ffffc90000741000 RSI: 000000000000175f RDI: 0000000000001760 [ 24.025117][ T418] RBP: 0000000000000fd0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 24.032918][ T418] R10: ffff8881f32d1f80 R11: 0000000000000002 R12: ffffffff846015d0 [ 24.040727][ T418] R13: fffffe0000000fd8 R14: ffff8881eefc0000 R15: fffffe0000000fdb [ 24.048539][ T418] FS: 00007f7a435486c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.057303][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.063724][ T418] CR2: 000000000000005c CR3: 00000001ee9ca000 CR4: 00000000003426a0 [ 24.071535][ T418] Call Trace: [ 24.074673][ T418] ? __die+0xb4/0x100 [ 24.078484][ T418] ? no_context+0xbda/0xe50 [ 24.082823][ T418] ? is_prefetch+0x4b0/0x4b0 [ 24.087248][ T418] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 24.092629][ T418] ? __do_page_fault+0xa7d/0xbb0 [ 24.097404][ T418] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 24.102956][ T418] ? __bad_area_nosemaphore+0xc0/0x460 [ 24.108253][ T418] ? page_fault+0x2f/0x40 [ 24.112417][ T418] ? call_function_interrupt+0x20/0x20 [ 24.117713][ T418] ? vmx_handle_exit_irqoff+0x45/0x220 [ 24.123008][ T418] ? check_preemption_disabled+0x91/0x320 [ 24.128564][ T418] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 24.134810][ T418] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 24.141058][ T418] ? call_function_interrupt+0x20/0x20 [ 24.146353][ T418] ? vcpu_enter_guest+0x2d06/0x9f70 [ 24.151388][ T418] ? unwind_next_frame+0x176a/0x1ea0 [ 24.156510][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.162061][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.167270][ T418] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 24.173172][ T418] ? local_bh_enable+0x20/0x20 [ 24.177772][ T418] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 24.183153][ T418] ? rcu_softirq_qs+0x90/0x90 [ 24.187665][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.193231][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.198428][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.204089][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.209646][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.214850][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.220404][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.225612][ T418] ? switch_mm_irqs_off+0x325/0xab0 [ 24.230646][ T418] ? _raw_spin_unlock_irq+0x4a/0x60 [ 24.235680][ T418] ? finish_task_switch+0x130/0x590 [ 24.240716][ T418] ? __schedule+0xb0d/0x1320 [ 24.245144][ T418] ? is_mmconf_reserved+0x430/0x430 [ 24.250174][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.255383][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.260936][ T418] ? preempt_schedule+0xd9/0xe0 [ 24.265626][ T418] ? preempt_schedule_common+0xa6/0xd0 [ 24.270917][ T418] ? preempt_schedule+0xd9/0xe0 [ 24.275606][ T418] ? schedule_preempt_disabled+0x20/0x20 [ 24.281074][ T418] ? tracing_record_taskinfo+0x74/0x230 [ 24.286454][ T418] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 24.291488][ T418] ? ___preempt_schedule+0x16/0x20 [ 24.296436][ T418] ? tracing_record_taskinfo+0x4a/0x230 [ 24.301814][ T418] ? read_msr+0x40/0x40 [ 24.305806][ T418] ? try_to_wake_up+0x9d3/0x14f0 [ 24.310583][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.316137][ T418] ? cpus_share_cache+0x110/0x110 [ 24.320999][ T418] ? check_preemption_disabled+0x9f/0x320 [ 24.326549][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.331759][ T418] ? kvm_check_async_pf_completion+0x387/0x3a0 [ 24.337749][ T418] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 24.343304][ T418] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 24.347989][ T418] ? debug_smp_processor_id+0x20/0x20 [ 24.353197][ T418] ? create_vcpu_fd+0x120/0x120 [ 24.357883][ T418] ? do_futex+0x13fe/0x19f0 [ 24.362242][ T418] ? __lru_cache_add+0x206/0x2b0 [ 24.367004][ T418] ? _raw_spin_unlock+0x49/0x60 [ 24.371689][ T418] ? handle_mm_fault+0x1d03/0x4990 [ 24.376636][ T418] ? create_vcpu_fd+0x120/0x120 [ 24.381427][ T418] ? do_vfs_ioctl+0x742/0x1720 [ 24.386027][ T418] ? ioctl_preallocate+0x250/0x250 [ 24.390973][ T418] ? __fget+0x407/0x490 [ 24.394965][ T418] ? fget_many+0x20/0x20 [ 24.399048][ T418] ? switch_fpu_return+0x1d4/0x410 [ 24.403994][ T418] ? security_file_ioctl+0x7d/0xa0 [ 24.408938][ T418] ? __x64_sys_ioctl+0xd4/0x110 [ 24.413624][ T418] ? do_syscall_64+0xca/0x1c0 [ 24.418136][ T418] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 24.424040][ T418] Modules linked in: [ 24.427781][ T418] CR2: 0000000000000086 [ 24.431771][ T418] ---[ end trace fac0b54ad5b78cc2 ]--- [ 24.437063][ T418] RIP: 0010:0x86 [ 24.440442][ T418] Code: Bad RIP value. [ 24.444345][ T418] RSP: 0018:ffff8881eea2f308 EFLAGS: 00010086 [ 24.450248][ T418] RAX: ffff8881eea2f338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 24.458058][ T418] RDX: ffffc90000741000 RSI: 000000000000175f RDI: 0000000000001760 [ 24.465869][ T418] RBP: 0000000000000fd0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 24.473682][ T418] R10: ffff8881f32d1f80 R11: 0000000000000002 R12: ffffffff846015d0 [ 24.481496][ T418] R13: fffffe0000000fd8 R14: ffff8881eefc0000 R15: fffffe0000000fdb [ 24.489306][ T418] FS: 00007f7a435486c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.498069][ T418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.504509][ T418] CR2: 000000000000005c CR3: 00000001ee9ca000 CR4: 00000000003426a0 [ 24.512305][ T418] Kernel panic - not syncing: Fatal exception [ 24.518386][ T418] Kernel Offset: disabled [ 24.522501][ T418] Rebooting in 86400 seconds..