syzkaller login: [ 64.341003][ T38] audit: type=1400 audit(1575024053.835:41): avc: denied { map } for pid=7824 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:48504' (ECDSA) to the list of known hosts. 2019/11/29 10:41:06 fuzzer started [ 76.785512][ T38] audit: type=1400 audit(1575024066.275:42): avc: denied { map } for pid=7840 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:41:07 dialing manager at 10.0.2.10:46599 2019/11/29 10:41:08 syscalls: 2543 2019/11/29 10:41:08 code coverage: enabled 2019/11/29 10:41:08 comparison tracing: enabled 2019/11/29 10:41:08 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:41:08 setuid sandbox: enabled 2019/11/29 10:41:08 namespace sandbox: enabled 2019/11/29 10:41:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:41:08 fault injection: enabled 2019/11/29 10:41:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:41:08 net packet injection: enabled 2019/11/29 10:41:08 net device setup: enabled 2019/11/29 10:41:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:41:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:41:23 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x1, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote}}, 0x4}, 0x0) [ 94.110110][ T38] audit: type=1400 audit(1575024083.605:43): avc: denied { map } for pid=7860 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=18767 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:41:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00|\xb82L}\xd8\xe3\\\x8d\xb5\x03\xe6\x96\xe8\xad7\x0e\xc8\xb9}KG\x91\x035t\t\xbc\xf3\x94\xa8\xa2m\x8cK\xf2\x1cw\xefOA\xf2\xf3\xa5\x80e\x9a\x83\xb6l|\xc0{\xa35a\x9a\xbf\xc7\x123\xf4\xdbc\x04\xa0\x94S\x11\x02^\xd6\xb5\x8et_\xf1\x15\xe5R\xf38@b\xe7\x0f\xb1L z\xc4Y-\xac}\xac\xd0-\x11\x1f/2\xcd/ll\a\x06+\xdef\xc0\xa9\x87R\x1d\x04[\x92\xf5#p\x8b\t\xa4kC1\xdb\f\xdc)\xcb\xb3\x944\xf6W}\v\xb0\x8d\x1f\xeb\x8c\x04\r\xaa\xe0\xeb\xf8\xf5\xc0\xd2s\xcf3\x1a\xb8\x1c\xa7\xf8\xd6\x9d0\xe7!\xc1\xc6O~\xf0\xc60\xe3\x1c\xdd\x82\x96`\xed)\xe0\xe7o\xb5E\xce\xcd\xdb\x90\xf1U \xb5NQ\"\xde>\xc3lm\x89H\x80=\xa8\xb2Q\x8f\xbe\xf9\xf3\x11fkxBe\xdeZ\xbe\x83lX\xd5\xc4\x91\xe3\xf3\x8f0N&R\x0e?Al\xc0!\xe3\x17\xc2\xa7\xf3\xb3\x93?t1\xa4\x1d\xddom\xee\xea<\xc8\x11\xb6\xc7|\xd1/V\xec\x9e\x94@\xa3\x92\b\xf4_S\xed\xf1d\xfa\xb5\xe8\x9d\xeb\xe4\xf6\xa1\xed') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, &(0x7f0000000380)) [ 94.295594][ T7861] IPVS: ftp: loaded support on port[0] = 21 [ 94.329058][ T7863] IPVS: ftp: loaded support on port[0] = 21 10:41:23 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="071f000000000000000002000002"], 0x14}}, 0x0) [ 94.427588][ T7861] chnl_net:caif_netlink_parms(): no params data found [ 94.464503][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.472369][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.480714][ T7861] device bridge_slave_0 entered promiscuous mode [ 94.494395][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.501678][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.509262][ T7861] device bridge_slave_1 entered promiscuous mode 10:41:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3cdeb10ab7f2"}, 0x14) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x0, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff17", 0x23) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0xffff}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) fcntl$setsig(r5, 0xa, 0x15) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0x9, 0x9, 0x8000, 0x7}) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) [ 94.540752][ T7866] IPVS: ftp: loaded support on port[0] = 21 [ 94.563034][ T7861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.575556][ T7861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.617095][ T7861] team0: Port device team_slave_0 added [ 94.618404][ T7861] team0: Port device team_slave_1 added [ 94.633560][ T7863] chnl_net:caif_netlink_parms(): no params data found 10:41:24 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00), 0x24, 0x0) [ 94.730390][ T7861] device hsr_slave_0 entered promiscuous mode [ 94.797697][ T7861] device hsr_slave_1 entered promiscuous mode 10:41:24 executing program 5: rename(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(0x0, 0xffffffffffffffff, 0xe, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0xae) fcntl$setownex(r2, 0xf, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) pipe(&(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) [ 94.862126][ T7870] IPVS: ftp: loaded support on port[0] = 21 [ 94.905492][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.914418][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.923659][ T7863] device bridge_slave_0 entered promiscuous mode [ 94.936491][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.943782][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.951614][ T7863] device bridge_slave_1 entered promiscuous mode [ 94.984603][ T7872] IPVS: ftp: loaded support on port[0] = 21 [ 95.006520][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.019512][ T38] audit: type=1400 audit(1575024084.515:44): avc: denied { create } for pid=7861 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.022531][ T7875] IPVS: ftp: loaded support on port[0] = 21 [ 95.048085][ T38] audit: type=1400 audit(1575024084.515:45): avc: denied { write } for pid=7861 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.073864][ T38] audit: type=1400 audit(1575024084.515:46): avc: denied { read } for pid=7861 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 95.098995][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.119440][ T7861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.189334][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 95.200451][ T7863] team0: Port device team_slave_0 added [ 95.210179][ T7861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.275358][ T7863] team0: Port device team_slave_1 added [ 95.288294][ T7861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.340282][ T7861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.466338][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.474476][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.482066][ T7866] device bridge_slave_0 entered promiscuous mode [ 95.489711][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.498091][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.505466][ T7866] device bridge_slave_1 entered promiscuous mode [ 95.548902][ T7863] device hsr_slave_0 entered promiscuous mode [ 95.607409][ T7863] device hsr_slave_1 entered promiscuous mode [ 95.647350][ T7863] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.684903][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.698107][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 95.714058][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.773765][ T7866] team0: Port device team_slave_0 added [ 95.782357][ T7863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.842044][ T7863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.926568][ T7866] team0: Port device team_slave_1 added [ 95.964954][ T7863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.010014][ T7863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.060633][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.067728][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.074856][ T7870] device bridge_slave_0 entered promiscuous mode [ 96.083781][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.090862][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.098781][ T7870] device bridge_slave_1 entered promiscuous mode [ 96.106796][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 96.208761][ T7866] device hsr_slave_0 entered promiscuous mode [ 96.267559][ T7866] device hsr_slave_1 entered promiscuous mode [ 96.337299][ T7866] debugfs: Directory 'hsr0' with parent '/' already present! [ 96.353093][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 96.416723][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.428608][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.442120][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.449899][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.458494][ T7875] device bridge_slave_0 entered promiscuous mode [ 96.484148][ T7870] team0: Port device team_slave_0 added [ 96.494986][ T7870] team0: Port device team_slave_1 added [ 96.501456][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.508682][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.516388][ T7875] device bridge_slave_1 entered promiscuous mode [ 96.548305][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.555306][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.563250][ T7872] device bridge_slave_0 entered promiscuous mode [ 96.573106][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.580412][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.588427][ T7872] device bridge_slave_1 entered promiscuous mode [ 96.612815][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.627746][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.641220][ T7866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.742350][ T7866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.813764][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.879033][ T7870] device hsr_slave_0 entered promiscuous mode [ 96.917583][ T7870] device hsr_slave_1 entered promiscuous mode [ 96.977221][ T7870] debugfs: Directory 'hsr0' with parent '/' already present! [ 96.990608][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.002458][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.011490][ T7866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.058897][ T7866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.113871][ T7875] team0: Port device team_slave_0 added [ 97.125020][ T7875] team0: Port device team_slave_1 added [ 97.135579][ T7861] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.164193][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.172265][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.180864][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.189516][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.198024][ T2789] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.205187][ T2789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.213091][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.221624][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.229812][ T2789] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.236784][ T2789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.244016][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.252797][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.280074][ T7872] team0: Port device team_slave_0 added [ 97.293329][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.304205][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.312787][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.322040][ T7872] team0: Port device team_slave_1 added [ 97.328823][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.380548][ T7875] device hsr_slave_0 entered promiscuous mode [ 97.417344][ T7875] device hsr_slave_1 entered promiscuous mode [ 97.457199][ T7875] debugfs: Directory 'hsr0' with parent '/' already present! [ 97.471877][ T7861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.482408][ T7861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.502694][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.511201][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.520144][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.528525][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.536750][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.545860][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.559553][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.571590][ T7870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.678923][ T7872] device hsr_slave_0 entered promiscuous mode [ 97.737373][ T7872] device hsr_slave_1 entered promiscuous mode [ 97.807246][ T7872] debugfs: Directory 'hsr0' with parent '/' already present! [ 97.820501][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.835292][ T7870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.880750][ T7870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.995068][ T7870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.059802][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.067286][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.075519][ T7872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.142206][ T7875] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.221951][ T7875] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.330187][ T7875] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.411175][ T7861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.419969][ T7872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.489852][ T7872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.529695][ T7872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.588812][ T7875] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.652006][ T38] audit: type=1400 audit(1575024088.145:47): avc: denied { associate } for pid=7861 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 98.676261][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.684218][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.698890][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.716051][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.734701][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.751044][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.761919][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.770105][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.778768][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.787236][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.794325][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.804233][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.819177][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.829240][ T7885] input: syz1 as /devices/virtual/input/input4 [ 98.853762][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.862515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.872647][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.882058][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.889238][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.896670][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.905185][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.912782][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.920275][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.928660][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.936915][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.943771][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.951913][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.970045][ T7887] input: syz1 as /devices/virtual/input/input5 [ 98.974702][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.988638][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.997419][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.005756][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.012994][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.022122][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.030734][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.039113][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.055746][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.068587][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.076796][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.084884][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.091857][ T7882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.101103][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.109610][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.117887][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.124328][ T7882] bridge0: port 2(bridge_slave_1) entered forwarding state 10:41:28 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x1, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote}}, 0x4}, 0x0) [ 99.132214][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.140062][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.147564][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.155826][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.163620][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.172145][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.180902][ T7892] input: syz1 as /devices/virtual/input/input6 [ 99.180995][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.195715][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.204149][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.212612][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.219652][ T7882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.220006][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.234674][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.242529][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.250228][ T7882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.267084][ T7863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.278145][ T7863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.302013][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.310090][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.318157][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.326051][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.334463][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.343067][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.351478][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.359940][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.368891][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.377339][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.385487][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.393624][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.401980][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.410538][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.417642][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.424786][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.433155][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.441306][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.449491][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.457435][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.465167][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.473654][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.482054][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.490204][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="9a612330ebef926d0fa7913a26a03278abc401a903ffbd415cc108371e0732230ba1d0284c4d6f9475529ebb743ce33a1a4e2d56eb7fbdf9642e7fdcc53ff334f9a4be13cba187d0a1842d1783447cd92d10a7924794d1941e18894b0ae14a4d22ddb4b0c06ed5ab7be06e89f774bbcabb7aa4b3113a2d7ff725ac81c5cfe61d77e76c47ed379a63aa0be8e097d06c795c98ee0fef3009a78d4ed0651defd2272c19352fa0f48eaaa202bd5801000000ae146a58b54907e97ee2770be00b7a2901fbd75b2290cd0398e46da93637bffcc0ae7969755daf9b573a1b990b664b509fe35ef78d4796b4d96b14a8ddefc199c1566c89272338bfd549a0745ae94b8f3cab34c43fddd31bcd7300fbc2eb678999e8f978690b56fdfc7d17300ee5e2ca03fa264bbf4055a57bdac497c1f22f292aba5853a6b9235d0120bf2a14a93ef54043d483f48af48a86f2ed89e1f7a1ee9566462a4c3017ecdfc4663066507681b26c876826cf5ca4b5e78d30500798e4b20e411320b5ad932e53515f9fff3c24b696f1d995ba2fb0bef7c5c015c01a5eea17150c51a03d2d440b8f56fdbe22e875a925e9fc8cf5cbb54f8f6b194a26d6ce4dd61bc952d1a2846011f4dcfad0aa8018b17554d7561be9fcb0ee42bd679a4279c51f8c2b8c9d75530219e97ba4b89b901d048c3a6622240bc6e11b1424c01741d2a9ec1f5526966076aa0c7b7bc60b88d4d33d5a7817c0933cf964f9833c64486b45222889ec699d0148e82f68b4527e0dfa44bcc4dbd24fc27fb02634cbd145095bdd6ea45197e2f47e7cc85359366eca3eb294c68a0298a4f58653c30de8af68ec034bf95e493faa7f34c1915ed1b239191bea9e6a398f9ce29840c7bc1dc629576dbabcc1") setgroups(0x54b, &(0x7f0000000180)) lseek(r0, 0x12, 0x0) [ 99.529195][ T7866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.541908][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") setgroups(0x54b, &(0x7f0000000180)) lseek(r0, 0x12, 0x0) [ 99.559011][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.568840][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.577453][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.586475][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.595124][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") setgroups(0x54b, &(0x7f0000000180)) lseek(r0, 0x12, 0x0) [ 99.625461][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.635838][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.648885][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") setgroups(0x54b, &(0x7f0000000180)) lseek(r0, 0x12, 0x0) [ 99.657575][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.666540][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.678945][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") lseek(r0, 0x12, 0x0) [ 99.689553][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.701268][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.716397][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") lseek(r0, 0x12, 0x0) [ 99.735335][ T7875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.745247][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.753816][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.767617][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.777715][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.811536][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.819786][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.829369][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.837939][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.846056][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.854301][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.862947][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.879256][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.887988][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.895492][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.903160][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.911973][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.921219][ T3140] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.928264][ T3140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.935859][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.948096][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.957717][ T7919] SELinux: duplicate or incompatible mount options [ 99.969018][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.977906][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.986282][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.993371][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.001104][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.010607][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.019152][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.027838][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.036084][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.044545][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.054319][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.066835][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.075939][ T7922] SELinux: duplicate or incompatible mount options [ 100.081965][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.093540][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 10:41:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00|\xb82L}\xd8\xe3\\\x8d\xb5\x03\xe6\x96\xe8\xad7\x0e\xc8\xb9}KG\x91\x035t\t\xbc\xf3\x94\xa8\xa2m\x8cK\xf2\x1cw\xefOA\xf2\xf3\xa5\x80e\x9a\x83\xb6l|\xc0{\xa35a\x9a\xbf\xc7\x123\xf4\xdbc\x04\xa0\x94S\x11\x02^\xd6\xb5\x8et_\xf1\x15\xe5R\xf38@b\xe7\x0f\xb1L z\xc4Y-\xac}\xac\xd0-\x11\x1f/2\xcd/ll\a\x06+\xdef\xc0\xa9\x87R\x1d\x04[\x92\xf5#p\x8b\t\xa4kC1\xdb\f\xdc)\xcb\xb3\x944\xf6W}\v\xb0\x8d\x1f\xeb\x8c\x04\r\xaa\xe0\xeb\xf8\xf5\xc0\xd2s\xcf3\x1a\xb8\x1c\xa7\xf8\xd6\x9d0\xe7!\xc1\xc6O~\xf0\xc60\xe3\x1c\xdd\x82\x96`\xed)\xe0\xe7o\xb5E\xce\xcd\xdb\x90\xf1U \xb5NQ\"\xde>\xc3lm\x89H\x80=\xa8\xb2Q\x8f\xbe\xf9\xf3\x11fkxBe\xdeZ\xbe\x83lX\xd5\xc4\x91\xe3\xf3\x8f0N&R\x0e?Al\xc0!\xe3\x17\xc2\xa7\xf3\xb3\x93?t1\xa4\x1d\xddom\xee\xea<\xc8\x11\xb6\xc7|\xd1/V\xec\x9e\x94@\xa3\x92\b\xf4_S\xed\xf1d\xfa\xb5\xe8\x9d\xeb\xe4\xf6\xa1\xed') read(r0, &(0x7f0000000380)=""/233, 0xffbe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, &(0x7f0000000380)) [ 100.108424][ T7872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.123554][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.143851][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.152121][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.179051][ T7925] SELinux: duplicate or incompatible mount options [ 100.186948][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.201315][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.209342][ T3140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.217278][ T38] audit: type=1400 audit(1575024089.705:48): avc: denied { open } for pid=7930 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 10:41:29 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="071f000000000000000002000002"], 0x14}}, 0x0) [ 100.327149][ C3] hrtimer: interrupt took 22520 ns 10:41:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="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") lseek(r0, 0x12, 0x0) 10:41:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3cdeb10ab7f2"}, 0x14) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x0, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff17", 0x23) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0xffff}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) fcntl$setsig(r5, 0xa, 0x15) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0x9, 0x9, 0x8000, 0x7}) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) [ 211.077110][ C3] rcu: INFO: rcu_preempt self-detected stall on CPU [ 211.077110][ C3] rcu: 3-....: (6745 ticks this GP) idle=1e6/1/0x4000000000000004 softirq=7481/7481 fqs=4641 [ 211.085291][ C3] (t=10502 jiffies g=5593 q=2164) [ 211.085291][ C3] NMI backtrace for cpu 3 [ 211.085291][ C3] CPU: 3 PID: 7941 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 211.085291][ C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 211.085291][ C3] Call Trace: [ 211.085291][ C3] [ 211.085291][ C3] dump_stack+0x197/0x210 [ 211.085291][ C3] nmi_cpu_backtrace.cold+0x70/0xb2 [ 211.085291][ C3] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 211.085291][ C3] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 211.085291][ C3] arch_trigger_cpumask_backtrace+0x14/0x20 [ 211.085291][ C3] rcu_dump_cpu_stacks+0x183/0x1cf [ 211.085291][ C3] ? find_next_bit+0x107/0x130 [ 211.085291][ C3] rcu_sched_clock_irq.cold+0x509/0xc02 [ 211.085291][ C3] ? raise_softirq+0x138/0x340 [ 211.085291][ C3] update_process_times+0x2d/0x70 [ 211.085291][ C3] tick_sched_handle+0xa2/0x190 [ 211.085291][ C3] tick_sched_timer+0x53/0x140 [ 211.085291][ C3] __hrtimer_run_queues+0x364/0xe40 [ 211.085291][ C3] ? tick_sched_do_timer+0x1b0/0x1b0 [ 211.085291][ C3] ? hrtimer_init+0x330/0x330 [ 211.085291][ C3] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 211.085291][ C3] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 211.085291][ C3] hrtimer_interrupt+0x314/0x770 [ 211.085291][ C3] smp_apic_timer_interrupt+0x160/0x610 [ 211.085291][ C3] apic_timer_interrupt+0xf/0x20 [ 211.085291][ C3] RIP: 0010:kfree+0x239/0x2c0 [ 211.085291][ C3] Code: 50 7e 0f 85 20 fe ff ff e8 d5 a5 4e ff e9 16 fe ff ff e8 3a a6 c8 ff 48 83 3d 8a 72 61 07 00 0f 84 85 00 00 00 48 89 df 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5d 41 5e 5d c3 e8 14 a6 c8 ff 48 83 3d [ 211.085291][ C3] RSP: 0018:ffff88807ed09d40 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 211.085291][ C3] RAX: 0000000000000007 RBX: 0000000000000282 RCX: 0000000000000002 [ 211.085291][ C3] RDX: 0000000000000000 RSI: ffff888066f70928 RDI: 0000000000000282 [ 211.085291][ C3] RBP: ffff88807ed09d60 R08: 1ffffffff15377bc R09: fffffbfff15377bd [ 211.085291][ C3] R10: fffffbfff15377bc R11: ffffffff8a9bbde7 R12: ffff888075bda200 [ 211.085291][ C3] R13: ffff88802d000540 R14: ffffffff86758214 R15: ffff888075497838 [ 211.085291][ C3] ? apic_timer_interrupt+0xa/0x20 [ 211.085291][ C3] ? ip6_dst_destroy+0x224/0x2a0 [ 211.085291][ C3] ip6_dst_destroy+0x224/0x2a0 [ 211.085291][ C3] ? rt6_uncached_list_del+0x2f0/0x2f0 [ 211.085291][ C3] dst_destroy+0x114/0x3c0 [ 211.085291][ C3] ? dst_destroy+0x3c0/0x3c0 [ 211.085291][ C3] dst_destroy_rcu+0x16/0x19 [ 211.085291][ C3] rcu_core+0x570/0x1540 [ 211.085291][ C3] ? __rcu_read_unlock+0x6b0/0x6b0 [ 211.085291][ C3] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 211.085291][ C3] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 211.085291][ C3] rcu_core_si+0x9/0x10 [ 211.085291][ C3] __do_softirq+0x262/0x98c [ 211.085291][ C3] ? sched_clock_cpu+0x14e/0x1b0 [ 211.085291][ C3] irq_exit+0x19b/0x1e0 [ 211.085291][ C3] smp_apic_timer_interrupt+0x1a3/0x610 [ 211.085291][ C3] apic_timer_interrupt+0xf/0x20 [ 211.085291][ C3] [ 211.085291][ C3] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 211.085291][ C3] Code: c0 68 34 13 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 12 6a 96 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 e7 ab d3 f9 65 8b 05 18 54 85 78 85 c0 74 06 41 [ 211.085291][ C3] RSP: 0018:ffff888066f7f8d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 211.085291][ C3] RAX: 1ffffffff122668d RBX: ffff888066f70040 RCX: 0000000000000006 [ 211.085291][ C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888066f708d4 [ 211.085291][ C3] RBP: ffff888066f7f8e0 R08: 1ffffffff15377bc R09: fffffbfff15377bd [ 211.085291][ C3] R10: fffffbfff15377bc R11: ffffffff8a9bbde7 R12: ffff88807ed37380 [ 211.085291][ C3] R13: ffff88807eaa8080 R14: ffff8880764f0d00 R15: 0000000000000000 [ 211.085291][ C3] ? _raw_spin_unlock_irq+0x23/0x80 [ 211.085291][ C3] finish_task_switch+0x147/0x750 [ 211.085291][ C3] ? finish_task_switch+0x119/0x750 [ 211.085291][ C3] __schedule+0x8e9/0x1f30 [ 211.085291][ C3] ? __sched_text_start+0x8/0x8 [ 211.085291][ C3] ? __this_cpu_preempt_check+0x35/0x190 [ 211.085291][ C3] ? retint_kernel+0x2b/0x2b [ 211.085291][ C3] ? perf_duration_warn+0x40/0x40 [ 211.085291][ C3] ? preempt_schedule+0x4b/0x60 [ 211.085291][ C3] preempt_schedule_common+0x4f/0xe0 [ 211.085291][ C3] ? __perf_event_enable+0x930/0x930 [ 211.085291][ C3] preempt_schedule+0x4b/0x60 [ 211.085291][ C3] ___preempt_schedule+0x16/0x18 [ 211.085291][ C3] ? smp_call_function_single+0x40b/0x480 [ 211.085291][ C3] smp_call_function_single+0x410/0x480 [ 211.085291][ C3] ? perf_duration_warn+0x40/0x40 [ 211.085291][ C3] ? generic_exec_single+0x4c0/0x4c0 [ 211.085291][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 211.085291][ C3] ? __perf_event_enable+0x930/0x930 [ 211.085291][ C3] task_function_call+0xe9/0x180 [ 211.085291][ C3] ? perf_event_addr_filters_exec+0x310/0x310 [ 211.085291][ C3] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 211.085291][ C3] ? __perf_event_enable+0x930/0x930 [ 211.085291][ C3] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.085291][ C3] ? exclusive_event_installable+0x257/0x320 [ 211.085291][ C3] perf_install_in_context+0x308/0x5a0 [ 211.085291][ C3] ? list_add_event+0xed0/0xed0 [ 211.085291][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.085291][ C3] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 211.085291][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.085291][ C3] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 211.085291][ C3] ? perf_event_set_output+0x4e0/0x4e0 [ 211.085291][ C3] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.085291][ C3] ? put_timespec64+0xda/0x140 [ 211.085291][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 211.085291][ C3] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 211.085291][ C3] ? do_syscall_64+0x26/0x790 [ 211.085291][ C3] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.085291][ C3] ? do_syscall_64+0x26/0x790 [ 211.085291][ C3] __x64_sys_perf_event_open+0xbe/0x150 [ 211.085291][ C3] do_syscall_64+0xfa/0x790 [ 211.085291][ C3] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.085291][ C3] RIP: 0033:0x45a759 [ 211.085291][ C3] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.085291][ C3] RSP: 002b:00007fe49b7c7c88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 211.085291][ C3] RAX: ffffffffffffffda RBX: 000000000071bf00 RCX: 000000000045a759 [ 211.085291][ C3] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 000000002001d000 [ 211.085291][ C3] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 211.085291][ C3] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe49b7c86d4 [ 211.085291][ C3] R13: 00000000004aec17 R14: 00000000006f1cb0 R15: 00000000ffffffff