[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.036283] random: sshd: uninitialized urandom read (32 bytes read) [ 40.269752] kauditd_printk_skb: 11 callbacks suppressed [ 40.269760] audit: type=1400 audit(1585766406.881:35): avc: denied { map } for pid=7387 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 40.326303] random: sshd: uninitialized urandom read (32 bytes read) [ 41.098146] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. [ 46.607652] random: sshd: uninitialized urandom read (32 bytes read) 2020/04/01 18:40:13 fuzzer started [ 46.830648] audit: type=1400 audit(1585766413.451:36): avc: denied { map } for pid=7396 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.343891] random: cc1: uninitialized urandom read (8 bytes read) 2020/04/01 18:40:14 dialing manager at 10.128.0.105:33485 2020/04/01 18:40:14 syscalls: 2937 2020/04/01 18:40:14 code coverage: enabled 2020/04/01 18:40:14 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/04/01 18:40:14 extra coverage: extra coverage is not supported by the kernel 2020/04/01 18:40:14 setuid sandbox: enabled 2020/04/01 18:40:14 namespace sandbox: enabled 2020/04/01 18:40:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/01 18:40:14 fault injection: enabled 2020/04/01 18:40:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/01 18:40:14 net packet injection: enabled 2020/04/01 18:40:14 net device setup: enabled 2020/04/01 18:40:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/01 18:40:14 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 49.032695] random: crng init done 18:43:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x2, 0x5, 0xfe, 0xfffffffe}, {0x4, 0x4, 0x0, 0x100}, {0x7, 0x80, 0x80, 0xc0000000}]}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x12000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000140)=@req3={0x4, 0x2, 0x80000000, 0x169, 0x41, 0x9, 0x30000000}, 0x1c) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getpeername$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x6]}, 0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) fcntl$lock(r3, 0x25, &(0x7f00000002c0)={0x1, 0x0, 0x7ff, 0x7, r4}) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x9) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000003c0)=0xc1a) fstat(0xffffffffffffffff, &(0x7f0000000400)) r6 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000004c0)='/proc/self/net/pfkey\x00') ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000540)={0x0, 0xfffffffb, 0xfffffffd, [], &(0x7f0000000500)=0x42}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-monitor\x00', 0xa2000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x74}}, 0x40800) 18:43:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) openat$ttyprintk(0xffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x408800, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x82, 0x4, 0xf}, 0x40) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, &(0x7f0000000080)={0xc6, 0x4, 0x7ff, 0x101, 0x1, 0x401, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580), 0x1000, r0}, 0x38) [ 234.212945] audit: type=1400 audit(1585766600.831:37): avc: denied { map } for pid=7396 comm="syz-fuzzer" path="/root/syzkaller-shm094585453" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 18:43:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300)='sy\xa4\remem0md5sum$\x00\xca\x9b\x8c\x9f\xcd\x89\x8f\xef\\\xfb\x8fI\xe0\xca\xaa\xe3?P\xa4.Y\xee\xd2\xc6\x19Y\xe8\xa3\xdc\x04c\xb6\xcf\x12N\xdc\x18\xabd\x82$>\xe1i\xe6=3\x81;|1\xc3N\xc4\xe3\xc1\xe9\x93)\f\xfc\xd9\xc0/i#\x95\x03\x15\xe4\x01$\x11sI\xb54\x90\xb8hR{/\xc0cX\x84\xc8\\\xc4:\x15\x94\xeb9no]\x14\xe2\xe7\x97P,Y(\x98\aa`\x0e@wT\x9b\xf1f\x1c\x11t\xbb\x1e\xe0;\xa0\xb3\xe8\x02\x89b\xb8\xb0\xbd.\x8ei\xca0\xbdJ\xc1=\xb4jc\xc4\xd5\xe0Wb\x16X6\'\xd5\xce\xfb\"\xfbg(I\xd9Y\xaa\xd1\xee\xe8\xecW\x13\x8f\x88\x05\x99\xb1\x9e\xc9s0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="0d000065cbb097002468d677030fbd65a050a2a283ea61e68c50092bafb2ba4d1c12a57aa2e591ace8eb212a1fb2c50a3eca0aca798b744006603f7ed44467cfbe345895b2bf7f000000000000094827f08ffd26211f0000a6801d74b515a300010000000000000000000000000000000000000000000000000000000031198671166aa0547a0ea351221765"], 0x20}}, 0x0) [ 243.229525] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 243.257066] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 243.279896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 243.301250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.309077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:43:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0) [ 243.327397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.335004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.343133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.350793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.363469] device veth0_vlan entered promiscuous mode [ 243.378985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 243.398586] device veth1_vlan entered promiscuous mode [ 243.410938] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 243.419209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.436741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.446345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.456428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.465616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.475365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:43:30 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 243.486123] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 243.493255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.509648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.520914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.538394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.548506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.557984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 243.568192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.578749] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready 18:43:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) [ 243.585811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.596679] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 243.604400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.614346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.621898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.629686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.639158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.647375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.667358] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 243.683399] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 243.690677] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 243.709268] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 243.722269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.733071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.764961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.772355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.781763] device veth0_vlan entered promiscuous mode [ 243.796864] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 243.810174] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 243.819715] device veth1_vlan entered promiscuous mode [ 243.827020] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 243.835767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.843547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.851800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.862553] device veth0_macvtap entered promiscuous mode [ 243.868882] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 243.878418] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 243.891481] device veth1_macvtap entered promiscuous mode [ 243.898427] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 243.914200] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 243.927877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 243.939391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 243.952370] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 243.962733] device veth0_macvtap entered promiscuous mode [ 243.969028] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 243.980374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.987552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.996121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.003864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.011799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.019566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.027253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.037522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.046832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.056593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.065779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.075803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.085260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.095294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.106130] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 244.113175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.124165] device veth1_macvtap entered promiscuous mode [ 244.134994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.142909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.156854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.166909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.176097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.186626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.195788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.205561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.214894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.224622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.235696] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 244.250293] batman_adv: batadv0: Interface activated: batadv_slave_1 18:43:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r1, 0x17) [ 244.260922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 244.276385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.288050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.312199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 244.359676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.374970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.384198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.394259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.403397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.413249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.422654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.432428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.441568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.451596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.462165] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 244.469066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.478932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.487153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.496643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.506738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.516509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.526514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.535669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.545394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.555009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.564776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.573917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.583659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.593709] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 244.600693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.609095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.617389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:43:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 18:43:32 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400f2ffffffffff", 0x30}], 0x1}, 0x0) 18:43:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) read$fb(r1, 0x0, 0x0) [ 245.790655] binder: 7758:7760 ioctl aead 0 returned -22 [ 245.801874] binder: 7758:7762 ioctl aead 0 returned -22 18:43:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_bridge\x00'}) 18:43:32 executing program 0: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x0, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) 18:43:32 executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) sendmmsg$sock(r1, &(0x7f00000012c0)=[{{&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x7f, @remote, 0x2000000}, 0x80, 0x0}}, {{&(0x7f0000000a80)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="8990f9ade7c567ec68f7831c4b17ba82c0b5ab5e192e65535ad341e087cb4239bbb173819fa736ab23ea76ac4ba37b425e0f414a90f7dab33055f79e5fa15031baa6c253d030ee6856b9c119c1efd5009db32c", 0x53}], 0x1, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x22c}}, @txtime={{0x18}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xd8}}, {{&(0x7f0000000cc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d40)}], 0x1, &(0x7f0000001280)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0xc2c4}}], 0x30}}], 0x3, 0x0) 18:43:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast=[0xff, 0x0], @random="86d35b1084bb", @val={@void}, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local, {[@generic={0x0, 0xe, "9d7ae47fc9a2363952bffe15"}, @cipso={0x86, 0x1b, 0x0, [{0x0, 0xe, "bc340564f930f5437cf89cac"}, {0x0, 0x7, "632584f017"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:43:32 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e0"}], 0x18}}], 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xfffe, 0x0, @rand_addr="963f6d8a15f20491bdf47bd0e5d12fb1"}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr="963f6d8a15f20491bdf47bd0e5d12fb1"}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e0"}], 0x18}}], 0x1, 0x0) 18:43:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d0743d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 18:43:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x28120001) dup2(0xffffffffffffffff, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0xc0045878, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) 18:43:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe35, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000024006d7f528e09000000000000000058", @ANYRES32, @ANYBLOB="000000009cffffff0000000008000100686866000c00020008000400000000335a18edbb00"], 0x38}}, 0x0) 18:43:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xe) 18:43:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x67f}], 0x10000000000001e1) 18:43:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001082000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 18:43:32 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000200)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fchmod(r0, 0x13c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000010000104000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000128009000100697069700000000030000280050005000600000006000f0000000000060011004e2400000800140008000000060012004e200000040013001400350065727370616e3000000000000000000008000a00", @ANYRES32, @ANYBLOB], 0x7c}}, 0x0) fsetxattr(r1, 0x0, 0x0, 0x0, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) [ 246.125480] hrtimer: interrupt took 116433 ns 18:43:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 18:43:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2ceb3504df6ead74ed8a60ab563e98b592a3d27a7082dbb78ab0200ba3da8b7f56445ab100621d6234555c00004fd1b3786cd89e9b08e3f5972fe9ca1e86323e19268c89ca5d801796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a60000000000000000000083e37f932a6b342390e27b6276676b659bdba8afe51cf610691e711b8e34b1cd3e381a3acaecbbbe3aef8276ad68f0ba06d89dbb3b8ed6000000000000b27d2e58cf2dbe4d05a51f7b2ad48d0d94e9c1cb29bd7672157fe7dc16b746312c9bfc8d07b45e923cee1c2f65c635ae5396e28612b2e71d7146dd392a8bc47400000000000000499bb99d3c4d96d3ea5606c95e41a335feb63fa253df143474d33e6885627f91c1a0ebfcd6f92e0eec34923f1ed289cd6234506159c05c8a2921d1c6fabf6d488d0b51264dd17b76fbc6fd1b05a223eb5f6771b3e4f1de1e2c99e01a0b173e93c0f31b3b249685e87115f0d63b3aecb4505a8ac18762e2154699b0a9"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x48, 0xfb, 0x15, 0x0, 0x0, "3535612161354c0fb81a15fda9d281b4"}, 0x15, 0x0) execve(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) 18:43:32 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x19f28) 18:43:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x28120001) dup2(0xffffffffffffffff, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0xc0045878, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) [ 246.236620] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:43:32 executing program 0: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) creat(0x0, 0x40) accept$ax25(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x604000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) sync_file_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xb72}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5804}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:43:33 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00004cd000/0x1000)=nil, 0x1002, 0x0) 18:43:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x4}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060800fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 18:43:33 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe35, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000024006d7f528e09000000000000000058", @ANYRES32, @ANYBLOB="00000000bfffffff0000000008000100686866000c00020008000400000000337d18edbb00"], 0x38}}, 0x0) 18:43:33 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000200)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fchmod(r0, 0x13c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000010000104000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000128009000100697069700000000030000280050005000600000006000f0000000000060011004e2400000800140008000000060012004e200000040013001400350065727370616e3000000000000000000008000a00", @ANYRES32, @ANYBLOB], 0x7c}}, 0x0) fsetxattr(r1, 0x0, 0x0, 0x0, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) 18:43:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffc}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 18:43:33 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x4000) 18:43:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x604000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5804}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:43:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x401c5820, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000007344000000162aef"]) [ 246.545802] audit: type=1400 audit(1585766613.161:43): avc: denied { map } for pid=7848 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30805 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 18:43:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105060f80ecdbc0b9f207c804a01b000000220206000a0002000b0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 18:43:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:43:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x0, 0x0, 0x128, 0x128, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) [ 246.717447] veth1_to_bridge: FDB only supports static addresses [ 246.729242] veth1_to_bridge: FDB only supports static addresses [ 246.839445] xt_TCPMSS: Only works on TCP SYN packets 18:43:33 executing program 0: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) creat(0x0, 0x40) accept$ax25(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x604000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) sync_file_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xb72}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5804}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:43:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x4, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r3, 0x0, 0x719000}, 0x20) 18:43:33 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x4}}, &(0x7f0000000780)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket(0x2, 0x0, 0x2) syz_open_dev$sg(0x0, 0x0, 0x5) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 18:43:33 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x6, 0xc000c, "19f55a2b5375a3860516c7675046d6488eaaccc8988edd0e", {0x4, 0x3}}) 18:43:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) write$vhost_msg_v2(r4, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xfffffffffffffdfe, 0x0}}, 0x95) 18:43:33 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) 18:43:33 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) 18:43:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x18}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) open(0x0, 0x204280, 0x0) flock(0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x97ba42a515907e43) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) ftruncate(r3, 0x80006) sendfile(r2, r3, 0x0, 0x8000fffffffe) 18:43:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x6, 0xc000c, "19f55a2b5375a3860516c7675046d6488eaaccc8988edd0e", {0x4, 0x3}}) 18:43:34 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xc9, &(0x7f0000000080)={0x0, 0xffffffffffffff7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000", 0x14) sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0) 18:43:34 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:43:34 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}}) 18:43:34 executing program 0: 18:43:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x6, 0xc000c, "19f55a2b5375a3860516c7675046d6488eaaccc8988edd0e", {0x4, 0x3}}) 18:43:34 executing program 4: semop(0x0, &(0x7f0000000000)=[{0x0, 0x2}], 0x1) semop(0x0, &(0x7f0000000040)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 18:43:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000002c0)={r6}) dup2(r5, r2) 18:43:34 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4801597f, 0x7fffffff, 0x9, 0x0, 0x0, "742826b9385cc7658a2ee8e04677fc8c2c64d6"}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$rds(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) 18:43:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14}}, 0x80}}, 0x0) 18:43:34 executing program 2: 18:43:34 executing program 0: [ 248.077597] audit: type=1400 audit(1585766614.691:44): avc: denied { map } for pid=7951 comm="syz-executor.3" path="/dev/nullb0" dev="devtmpfs" ino=139 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 18:43:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x6, 0xc000c, "19f55a2b5375a3860516c7675046d6488eaaccc8988edd0e", {0x4, 0x3}}) 18:43:34 executing program 3: 18:43:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b3a38a97b312c151902d3b78d5b7b07573e000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x80002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x300, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 18:43:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x0, 0x1002, 0x0, 0x0, 0x0}) 18:43:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) [ 248.178613] audit: type=1400 audit(1585766614.691:45): avc: denied { create } for pid=7950 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:43:34 executing program 3: 18:43:34 executing program 0: 18:43:34 executing program 1: 18:43:34 executing program 0: [ 248.321336] tpacket_rcv: packet too big, clamped from 796 to 112. macoff=96 18:43:34 executing program 5: 18:43:35 executing program 3: 18:43:35 executing program 1: [ 248.362906] audit: type=1400 audit(1585766614.691:46): avc: denied { write } for pid=7950 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:43:35 executing program 0: 18:43:35 executing program 5: 18:43:35 executing program 4: 18:43:35 executing program 2: 18:43:35 executing program 1: 18:43:35 executing program 0: 18:43:35 executing program 3: 18:43:35 executing program 5: 18:43:35 executing program 2: 18:43:35 executing program 1: 18:43:35 executing program 0: 18:43:35 executing program 3: 18:43:35 executing program 5: 18:43:35 executing program 4: 18:43:35 executing program 1: 18:43:35 executing program 2: 18:43:35 executing program 0: 18:43:35 executing program 3: 18:43:35 executing program 4: 18:43:35 executing program 5: 18:43:35 executing program 1: 18:43:35 executing program 2: 18:43:35 executing program 3: 18:43:35 executing program 0: 18:43:35 executing program 4: 18:43:35 executing program 1: 18:43:35 executing program 5: 18:43:35 executing program 2: 18:43:35 executing program 3: 18:43:35 executing program 0: 18:43:35 executing program 1: 18:43:35 executing program 4: 18:43:35 executing program 0: 18:43:35 executing program 5: 18:43:35 executing program 2: 18:43:35 executing program 3: 18:43:35 executing program 1: 18:43:35 executing program 2: 18:43:35 executing program 4: 18:43:35 executing program 0: 18:43:35 executing program 3: 18:43:35 executing program 5: 18:43:35 executing program 1: 18:43:35 executing program 4: 18:43:35 executing program 2: 18:43:35 executing program 0: 18:43:35 executing program 1: 18:43:35 executing program 3: 18:43:35 executing program 5: 18:43:35 executing program 4: 18:43:35 executing program 2: 18:43:35 executing program 0: 18:43:36 executing program 1: 18:43:36 executing program 5: 18:43:36 executing program 4: 18:43:36 executing program 3: 18:43:36 executing program 2: 18:43:36 executing program 1: 18:43:36 executing program 0: 18:43:36 executing program 5: 18:43:36 executing program 4: 18:43:36 executing program 2: 18:43:36 executing program 5: 18:43:36 executing program 0: 18:43:36 executing program 2: 18:43:36 executing program 1: 18:43:36 executing program 3: 18:43:36 executing program 4: 18:43:36 executing program 0: 18:43:36 executing program 3: 18:43:36 executing program 1: 18:43:36 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 18:43:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$read(0xb, r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x41, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) 18:43:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$autofs(0xffffffffffffff9c, 0x0, 0x121080, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) socket(0x41, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) 18:43:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) socket(0x41, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:43:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$read(0xb, 0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x41, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) 18:43:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000002c00270d000000000000000000000002", @ANYRES32=r6, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c0002000600020000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r6, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 249.826207] audit: type=1400 audit(1585766616.441:47): avc: denied { sys_admin } for pid=8127 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 18:43:36 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x400, "777284f40fa3762daae28202b75c317aa335912182f7ed4114c1dc5cc04bbf33"}) [ 355.060020] INFO: rcu_preempt self-detected stall on CPU [ 355.065529] 1-...: (1 GPs behind) idle=ee2/140000000000002/0 softirq=13531/13532 fqs=7 [ 355.073748] (t=10500 jiffies g=2062 c=2061 q=634) [ 355.078764] rcu_preempt kthread starved for 10311 jiffies! g2062 c2061 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 355.089241] rcu_preempt R running task 29920 8 2 0x80000000 [ 355.096434] Call Trace: [ 355.099108] ? __schedule+0x7b8/0x1ca0 [ 355.102999] ? __sched_text_start+0x8/0x8 [ 355.107138] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 355.112232] schedule+0x8d/0x1b0 [ 355.115588] schedule_timeout+0x43c/0xe40 [ 355.119826] ? usleep_range+0x130/0x130 [ 355.123836] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 355.128846] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 355.133992] ? call_timer_fn+0x650/0x650 [ 355.138055] rcu_gp_kthread+0xb8e/0x1ce0 [ 355.142127] ? force_qs_rnp+0x4f0/0x4f0 [ 355.146095] ? force_qs_rnp+0x4f0/0x4f0 [ 355.150095] kthread+0x30d/0x420 [ 355.153457] ? kthread_create_on_node+0xd0/0xd0 [ 355.158119] ret_from_fork+0x24/0x30 [ 355.162012] NMI backtrace for cpu 1 [ 355.165925] CPU: 1 PID: 8132 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 355.173704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.183046] Call Trace: [ 355.185618] [ 355.187833] dump_stack+0x13e/0x194 [ 355.191457] nmi_cpu_backtrace.cold+0x57/0x93 [ 355.195945] ? irq_force_complete_move.cold+0x7b/0x7b [ 355.201125] nmi_trigger_cpumask_backtrace+0x139/0x17e [ 355.206397] rcu_dump_cpu_stacks+0x16d/0x1b8 [ 355.210802] rcu_check_callbacks.cold+0x490/0xdaa [ 355.215691] ? rcu_read_lock_sched_held+0x10a/0x130 [ 355.220706] update_process_times+0x29/0x60 [ 355.225044] tick_sched_handle+0x7d/0x150 [ 355.229187] tick_sched_timer+0x3e/0x120 [ 355.233239] __hrtimer_run_queues+0x25c/0xbb0 [ 355.237727] ? tick_sched_do_timer+0xe0/0xe0 [ 355.242141] ? hrtimer_start_range_ns+0x1060/0x1060 [ 355.247161] hrtimer_interrupt+0x1e6/0x5e0 [ 355.251400] smp_apic_timer_interrupt+0x117/0x5e0 [ 355.256358] apic_timer_interrupt+0x8f/0xa0 [ 355.260677] RIP: 0010:lock_release+0x41e/0x7f0 [ 355.265247] RSP: 0018:ffff8880aeb07630 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 355.272947] RAX: 1ffffffff0fa2cd1 RBX: 1ffff11015d60eca RCX: 1ffff11014f9555e [ 355.280213] RDX: dffffc0000000000 RSI: 0000000000000005 RDI: 0000000000000282 [ 355.287482] RBP: ffff8880a7caa280 R08: 0000000000000001 R09: 0000000000000004 [ 355.294753] R10: ffff8880a7caaba0 R11: ffff8880a7caa280 R12: ffffffff8163259c [ 355.302023] R13: 0000000000000003 R14: ffff8880a7caa280 R15: 0000000000000005 [ 355.309358] ? is_bpf_text_address+0x7c/0x120 [ 355.313858] ? lock_downgrade+0x6e0/0x6e0 [ 355.318004] is_bpf_text_address+0xa3/0x120 [ 355.322357] kernel_text_address+0x6e/0xe0 [ 355.326592] __kernel_text_address+0x9/0x30 [ 355.330908] unwind_get_return_address+0x5a/0xa0 [ 355.335657] __save_stack_trace+0x7b/0xd0 [ 355.339841] save_stack+0x32/0xa0 [ 355.343292] ? save_stack+0x32/0xa0 [ 355.346937] ? kasan_kmalloc+0xbf/0xe0 [ 355.350815] ? kmem_cache_alloc+0x127/0x770 [ 355.355174] ? dst_alloc+0xe6/0x190 [ 355.358823] ? __ip6_dst_alloc+0x2e/0x50 [ 355.362873] ? ip6_dst_alloc+0x2a/0x1d0 [ 355.366836] ? icmp6_dst_alloc+0x155/0x580 [ 355.371059] ? ndisc_send_skb+0xc0f/0x11e0 [ 355.375283] ? ndisc_send_rs+0x125/0x630 [ 355.379364] ? addrconf_rs_timer+0x289/0x5a0 [ 355.383764] ? call_timer_fn+0x14a/0x650 [ 355.387816] ? run_timer_softirq+0x52a/0x1390 [ 355.392304] ? __do_softirq+0x254/0x9bf [ 355.396394] ? irq_exit+0x15b/0x1a0 [ 355.400016] ? smp_apic_timer_interrupt+0x141/0x5e0 [ 355.405024] ? apic_timer_interrupt+0x8f/0xa0 [ 355.409507] ? strlen+0x46/0x90 [ 355.412831] ? security_fs_use+0x3c4/0x630 [ 355.417076] ? selinux_set_mnt_opts+0xf81/0x1310 [ 355.421944] ? superblock_doinit+0xfc/0x1f0 [ 355.426259] ? selinux_sb_kern_mount+0x91/0x210 [ 355.430969] ? security_sb_kern_mount+0x76/0xb0 [ 355.435728] ? mount_fs+0x149/0x2a0 [ 355.439372] ? vfs_kern_mount.part.0+0x5b/0x3c0 [ 355.444030] ? kern_mount_data+0x51/0xb0 [ 355.448105] ? pid_ns_prepare_proc+0x1a/0x80 [ 355.452509] ? alloc_pid+0x9be/0xc40 [ 355.456254] ? copy_process.part.0+0x272f/0x6a70 [ 355.461001] ? _do_fork+0x180/0xc80 [ 355.464620] ? do_syscall_64+0x1d5/0x640 [ 355.468678] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 355.474036] ? retint_kernel+0x2d/0x2d [ 355.477922] ? trace_hardirqs_on_caller+0x196/0x590 [ 355.482930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 355.487681] ? retint_kernel+0x2d/0x2d [ 355.491565] ? kasan_unpoison_shadow+0x30/0x40 [ 355.496137] kasan_kmalloc+0xbf/0xe0 [ 355.499845] kmem_cache_alloc+0x127/0x770 [ 355.503992] dst_alloc+0xe6/0x190 [ 355.507539] __ip6_dst_alloc+0x2e/0x50 [ 355.511423] ip6_dst_alloc+0x2a/0x1d0 [ 355.515216] icmp6_dst_alloc+0x155/0x580 [ 355.519270] ndisc_send_skb+0xc0f/0x11e0 [ 355.523328] ? ndisc_error_report+0x180/0x180 [ 355.527822] ? memcpy+0x35/0x50 [ 355.531095] ndisc_send_rs+0x125/0x630 [ 355.534977] addrconf_rs_timer+0x289/0x5a0 [ 355.539204] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 355.543461] call_timer_fn+0x14a/0x650 [ 355.547346] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 355.551579] ? __next_timer_interrupt+0x140/0x140 [ 355.556428] ? _raw_spin_unlock_irq+0x24/0x80 [ 355.560925] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 355.565162] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 355.569394] run_timer_softirq+0x52a/0x1390 [ 355.573722] ? add_timer+0xa20/0xa20 [ 355.577437] __do_softirq+0x254/0x9bf [ 355.581294] ? check_preemption_disabled+0x35/0x240 [ 355.586309] irq_exit+0x15b/0x1a0 [ 355.589763] smp_apic_timer_interrupt+0x141/0x5e0 [ 355.594606] apic_timer_interrupt+0x8f/0xa0 [ 355.598920] [ 355.601163] RIP: 0010:strlen+0x46/0x90 [ 355.605049] RSP: 0018:ffff88804ac17810 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 355.612753] RAX: ffff888099f3f443 RBX: dffffc0000000000 RCX: 0000000000000002 [ 355.620023] RDX: ffff888099f3f443 RSI: ffffffff82c84137 RDI: ffff888099f3f440 [ 355.627289] RBP: ffff888099f3f440 R08: 0000000000000170 R09: ffffffff8a05c400 [ 355.634553] R10: ffff8880a7caab50 R11: ffff8880a7caa280 R12: ffff888099f3f440 [ 355.641822] R13: dffffc0000000000 R14: ffff888092177640 R15: dffffc0000000000 [ 355.649103] ? security_fs_use+0x3a7/0x630 [ 355.653336] security_fs_use+0x3c4/0x630 [ 355.657393] selinux_set_mnt_opts+0xf81/0x1310 [ 355.661976] ? sb_finish_set_opts+0x690/0x690 [ 355.666470] superblock_doinit+0xfc/0x1f0 [ 355.670611] ? selinux_parse_opts_str+0xa30/0xa30 [ 355.675446] ? find_held_lock+0x2d/0x110 [ 355.679500] ? mount_ns+0xb3/0x180 [ 355.683038] selinux_sb_kern_mount+0x91/0x210 [ 355.687814] ? delayed_superblock_init+0x20/0x20 [ 355.692563] ? lock_downgrade+0x6e0/0x6e0 [ 355.696721] security_sb_kern_mount+0x76/0xb0 [ 355.701218] mount_fs+0x149/0x2a0 [ 355.704671] vfs_kern_mount.part.0+0x5b/0x3c0 [ 355.709164] kern_mount_data+0x51/0xb0 [ 355.713050] pid_ns_prepare_proc+0x1a/0x80 [ 355.717284] alloc_pid+0x9be/0xc40 [ 355.720827] copy_process.part.0+0x272f/0x6a70 [ 355.725501] ? trace_hardirqs_on+0x10/0x10 [ 355.729734] ? save_trace+0x290/0x290 [ 355.733541] ? __cleanup_sighand+0x40/0x40 [ 355.737766] ? lock_downgrade+0x6e0/0x6e0 [ 355.741917] _do_fork+0x180/0xc80 [ 355.745365] ? put_timespec64+0xaa/0xf0 [ 355.749332] ? fork_idle+0x270/0x270 [ 355.753044] ? SyS_clock_gettime+0xf5/0x180 [ 355.757355] ? SyS_clock_settime+0x1a0/0x1a0 [ 355.761752] ? fput+0xb/0x140 [ 355.764860] ? do_syscall_64+0x4c/0x640 [ 355.768826] ? sys_vfork+0x20/0x20 [ 355.772365] do_syscall_64+0x1d5/0x640 [ 355.776250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 355.781428] RIP: 0033:0x45c849 [ 355.784608] RSP: 002b:00007fde6020bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 355.792335] RAX: ffffffffffffffda RBX: 00007fde6020c6d4 RCX: 000000000045c849 [ 355.799608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 355.806871] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 355.814134] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 355.821398] R13: 0000000000000074 R14: 00000000004c3103 R15: 000000000076bf0c [ 355.830016] INFO: rcu_sched detected stalls on CPUs/tasks: [ 355.835653] (detected by 0, t=10577 jiffies, g=1470, c=1469, q=6) [ 355.841967] All QSes seen, last rcu_sched kthread activity 10577 (4294972879-4294962302), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 355.854043] syz-executor.1 R running task 27728 8136 7422 0x00000008 [ 355.861236] Call Trace: [ 355.863802] [ 355.866021] sched_show_task.cold+0x2e3/0x347 [ 355.870518] rcu_check_callbacks.cold+0xd3f/0xdaa [ 355.875352] update_process_times+0x29/0x60 [ 355.879660] tick_sched_handle+0x7d/0x150 [ 355.883798] tick_sched_timer+0x3e/0x120 [ 355.887846] __hrtimer_run_queues+0x25c/0xbb0 [ 355.892322] ? tick_sched_do_timer+0xe0/0xe0 [ 355.896719] ? hrtimer_start_range_ns+0x1060/0x1060 [ 355.901722] hrtimer_interrupt+0x1e6/0x5e0 [ 355.905960] smp_apic_timer_interrupt+0x117/0x5e0 [ 355.910786] apic_timer_interrupt+0x8f/0xa0 [ 355.915106] RIP: 0010:_raw_spin_unlock_irqrestore+0x91/0xe0 [ 355.920816] RSP: 0018:ffff8880aea075b8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 355.928509] RAX: 1ffffffff0fa2cd1 RBX: 0000000000000282 RCX: 1ffff110126a1590 [ 355.935774] RDX: dffffc0000000000 RSI: ffff88809350acd8 RDI: 0000000000000282 [ 355.943035] RBP: ffffffff8a6b4088 R08: 0000000000000001 R09: 0000000000000000 [ 355.950294] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000053200 [ 355.957555] R13: ffff8880900057e0 R14: 0000000000000000 R15: ffffffff8a6b4088 [ 355.964832] __debug_object_init+0x167/0x830 [ 355.969224] ? debug_object_destroy+0x230/0x230 [ 355.973887] ? _raw_spin_unlock_irqrestore+0x91/0xe0 [ 355.978975] debug_object_activate+0x274/0x450 [ 355.983540] ? debug_object_free+0x390/0x390 [ 355.987944] ? retint_kernel+0x2d/0x2d [ 355.991816] ? dst_destroy+0x330/0x330 [ 355.995701] __call_rcu.constprop.0+0x31/0x7e0 [ 356.000278] ? dst_destroy+0x330/0x330 [ 356.004146] dst_release+0x56/0x80 [ 356.007930] __dev_queue_xmit+0x17df/0x25c0 [ 356.012237] ? mark_held_locks+0xa6/0xf0 [ 356.016287] ? netdev_pick_tx+0x2e0/0x2e0 [ 356.020424] ? retint_kernel+0x2d/0x2d [ 356.024313] ? ip6_finish_output2+0x1085/0x2150 [ 356.028987] ip6_finish_output2+0x1085/0x2150 [ 356.033473] ? ip6_forward_finish+0x470/0x470 [ 356.038168] ? lock_downgrade+0x6e0/0x6e0 [ 356.042306] ? ip6_finish_output+0x4d9/0xaf0 [ 356.046708] ip6_finish_output+0x4d9/0xaf0 [ 356.050939] ip6_output+0x1c9/0x650 [ 356.054551] ? ip6_finish_output+0xaf0/0xaf0 [ 356.058943] ? ip6_fragment+0x3150/0x3150 [ 356.063089] ndisc_send_skb+0xb56/0x11e0 [ 356.067141] ? ndisc_error_report+0x180/0x180 [ 356.071641] ? memcpy_erms+0x8/0x10 [ 356.075257] ndisc_send_rs+0x125/0x630 [ 356.079128] addrconf_rs_timer+0x289/0x5a0 [ 356.083526] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 356.087745] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 356.091981] ? addrconf_rs_timer+0x1e/0x5a0 [ 356.096294] call_timer_fn+0x14a/0x650 [ 356.100171] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 356.104390] ? __next_timer_interrupt+0x140/0x140 [ 356.109224] ? _raw_spin_unlock_irq+0x50/0x80 [ 356.113706] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 356.117933] run_timer_softirq+0x52a/0x1390 [ 356.122256] ? add_timer+0xa20/0xa20 [ 356.125957] ? __lock_is_held+0xad/0x140 [ 356.130006] __do_softirq+0x254/0x9bf [ 356.133798] ? check_preemption_disabled+0x35/0x240 [ 356.138815] irq_exit+0x15b/0x1a0 [ 356.142255] smp_apic_timer_interrupt+0x141/0x5e0 [ 356.147080] apic_timer_interrupt+0x8f/0xa0 [ 356.151483] [ 356.153890] RIP: 0010:ext4_itable_unused_count+0x49/0x100 [ 356.159415] RSP: 0018:ffff88804b3c7b28 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 356.167116] RAX: 0000000000000005 RBX: ffff8880bfff4040 RCX: ffffc90009e4c000 [ 356.174369] RDX: 0000000000000000 RSI: ffffffff81c9fc9f RDI: ffff888215446a00 [ 356.181631] RBP: ffff888215446380 R08: 0000000000000001 R09: 00000000000483d4 [ 356.188891] R10: ffff88809350ac38 R11: ffff88809350a340 R12: 0000000000001f47 [ 356.196153] R13: 0000000000000000 R14: ffff8880bfff4040 R15: ffff888215446380 [ 356.203420] ? ext4_itable_unused_count+0xf/0x100 [ 356.208247] ? ext4_itable_unused_count+0xf/0x100 [ 356.213133] __ext4_new_inode+0x1a07/0x4e90 [ 356.217445] ? ext4_free_inode+0x1480/0x1480 [ 356.221836] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 356.226835] ? check_preemption_disabled+0x35/0x240 [ 356.231832] ? retint_kernel+0x2d/0x2d [ 356.235727] ext4_mkdir+0x2e4/0xb60 [ 356.239339] ? selinux_dentry_init_security+0x220/0x220 [ 356.244797] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 356.249450] ? security_inode_mkdir+0xcc/0x100 [ 356.254024] vfs_mkdir+0x3af/0x620 [ 356.257546] SyS_mkdir+0x1bc/0x210 [ 356.261072] ? SyS_mkdirat+0x210/0x210 [ 356.264942] ? do_syscall_64+0x4c/0x640 [ 356.268898] ? SyS_mkdirat+0x210/0x210 [ 356.272779] do_syscall_64+0x1d5/0x640 [ 356.276663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 356.281833] RIP: 0033:0x45bc67 [ 356.285001] RSP: 002b:00007f6052bc0a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 356.292690] RAX: ffffffffffffffda RBX: 00007f6052bc16d4 RCX: 000000000045bc67 [ 356.299939] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000180 [ 356.307201] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 356.314460] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000ffffffff [ 356.321730] R13: 0000000000000bec R14: 00000000004ce0fd R15: 000000000076bf0c [ 356.329014] rcu_sched kthread starved for 10627 jiffies! g1470 c1469 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 [ 356.339315] rcu_sched R running task 29984 9 2 0x80000000 [ 356.346499] Call Trace: [ 356.349082] ? __schedule+0x7b8/0x1ca0 [ 356.352966] ? __sched_text_start+0x8/0x8 [ 356.357111] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 356.362207] schedule+0x8d/0x1b0 [ 356.365565] schedule_timeout+0x43c/0xe40 [ 356.369698] ? usleep_range+0x130/0x130 [ 356.373666] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 356.378674] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 356.383761] ? call_timer_fn+0x650/0x650 [ 356.387805] rcu_gp_kthread+0xb8e/0x1ce0 [ 356.391878] ? force_qs_rnp+0x4f0/0x4f0 [ 356.395848] ? force_qs_rnp+0x4f0/0x4f0 [ 356.399810] kthread+0x30d/0x420 [ 356.403160] ? kthread_create_on_node+0xd0/0xd0 [ 356.407823] ret_from_fork+0x24/0x30 2020/04/01 18:45:23 Manager.Poll call failed: write tcp 10.128.0.225:43682->10.128.0.105:33485: write: connection reset by peer