Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2020/01/05 17:00:02 fuzzer started 2020/01/05 17:00:03 dialing manager at 10.128.0.105:45929 2020/01/05 17:00:04 syscalls: 2782 2020/01/05 17:00:04 code coverage: enabled 2020/01/05 17:00:04 comparison tracing: enabled 2020/01/05 17:00:04 extra coverage: enabled 2020/01/05 17:00:04 setuid sandbox: enabled 2020/01/05 17:00:04 namespace sandbox: enabled 2020/01/05 17:00:04 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/05 17:00:04 fault injection: enabled 2020/01/05 17:00:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/05 17:00:04 net packet injection: enabled 2020/01/05 17:00:04 net device setup: enabled 2020/01/05 17:00:04 concurrency sanitizer: enabled 2020/01/05 17:00:04 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 61.836124][ T7931] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/05 17:00:14 adding functions to KCSAN blacklist: 'ep_poll' 'pcpu_alloc' 'n_tty_receive_buf_common' 'enqueue_timer' 'kauditd_thread' 'add_timer' 'mod_timer' 'vm_area_dup' 'shmem_getpage_gfp' 'dnotify_flush' 'blk_mq_sched_dispatch_requests' 'ext4_mb_find_by_goal' 'generic_file_read_iter' 'generic_update_time' 'tomoyo_supervisor' 'poll_schedule_timeout' 'do_exit' 'fasync_remove_entry' 'timer_clear_idle' 'wbt_issue' 'generic_write_end' 'taskstats_exit' 'find_alive_thread' 'd_delete' '__hrtimer_run_queues' 'tick_do_update_jiffies64' 'do_nanosleep' 'ext4_free_inodes_count' 'blk_mq_dispatch_rq_list' 'do_signal_stop' 'tick_sched_do_timer' 'ext4_free_inode' 'wbt_done' 'xas_find_marked' 'sit_tunnel_xmit' 'tick_nohz_idle_stop_tick' 'audit_log_start' '__add_to_page_cache_locked' '__mark_inode_dirty' 'rcu_gp_fqs_loop' 'do_readlinkat' 'ext4_nonda_switch' 'dd_has_work' 'copy_process' 'page_counter_try_charge' 'futex_wait_queue_me' 'iomap_dio_bio_actor' 'process_srcu' 'run_timer_softirq' 'generic_fillattr' 'ktime_get_real_seconds' '__snd_rawmidi_transmit_ack' 'shmem_file_read_iter' '__tty_hangup' 'blk_mq_get_request' '__rb_rotate_set_parents' 'ext4_mark_iloc_dirty' 'queue_access_lock' 'rcu_gp_fqs_check_wake' '__rcu_read_unlock' '__dev_queue_xmit' 'find_get_pages_range_tag' '__ext4_new_inode' 'xas_clear_mark' 'find_next_bit' 'do_syslog' 'pid_update_inode' 'ext4_has_free_clusters' 'find_group_orlov' 'pipe_double_lock' 17:02:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) 17:02:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 232.556411][ T7935] IPVS: ftp: loaded support on port[0] = 21 [ 232.693847][ T7935] chnl_net:caif_netlink_parms(): no params data found 17:02:56 executing program 2: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) [ 232.740348][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.747523][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.755636][ T7935] device bridge_slave_0 entered promiscuous mode [ 232.769011][ T7938] IPVS: ftp: loaded support on port[0] = 21 [ 232.775250][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.799106][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.818918][ T7935] device bridge_slave_1 entered promiscuous mode [ 232.869134][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.891689][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.920345][ T7940] IPVS: ftp: loaded support on port[0] = 21 [ 232.932939][ T7935] team0: Port device team_slave_0 added [ 232.958640][ T7935] team0: Port device team_slave_1 added 17:02:57 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 233.060876][ T7935] device hsr_slave_0 entered promiscuous mode [ 233.108896][ T7935] device hsr_slave_1 entered promiscuous mode [ 233.159405][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 233.253528][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 233.255674][ T7943] IPVS: ftp: loaded support on port[0] = 21 [ 233.271387][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.279240][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.287102][ T7938] device bridge_slave_0 entered promiscuous mode [ 233.311131][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.318280][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.326030][ T7938] device bridge_slave_1 entered promiscuous mode [ 233.356222][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.363364][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.371684][ T7940] device bridge_slave_0 entered promiscuous mode [ 233.379230][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.386269][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.394377][ T7940] device bridge_slave_1 entered promiscuous mode [ 233.440294][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.461633][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.480631][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.501757][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.545153][ T7938] team0: Port device team_slave_0 added [ 233.571306][ T7938] team0: Port device team_slave_1 added [ 233.588091][ T7940] team0: Port device team_slave_0 added 17:02:57 executing program 4: gettid() dup(0xffffffffffffffff) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x8) unshare(0x60040000) [ 233.594239][ T7935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.652188][ T7935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.713976][ T7940] team0: Port device team_slave_1 added [ 233.751296][ T7935] netdevsim netdevsim0 netdevsim2: renamed from eth2 17:02:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r1 = dup(r0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4) [ 233.880690][ T7938] device hsr_slave_0 entered promiscuous mode [ 233.928587][ T7938] device hsr_slave_1 entered promiscuous mode [ 233.988345][ T7938] debugfs: Directory 'hsr0' with parent '/' already present! [ 233.996224][ T7935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.080684][ T7946] IPVS: ftp: loaded support on port[0] = 21 [ 234.115397][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 234.170942][ T7940] device hsr_slave_0 entered promiscuous mode [ 234.218607][ T7940] device hsr_slave_1 entered promiscuous mode [ 234.278283][ T7940] debugfs: Directory 'hsr0' with parent '/' already present! [ 234.311213][ T7951] IPVS: ftp: loaded support on port[0] = 21 [ 234.332800][ T7938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.385557][ T7938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.435989][ T7938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.482501][ T7938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.561958][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.569233][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.576982][ T7943] device bridge_slave_0 entered promiscuous mode [ 234.606936][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.614058][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.621210][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.629318][ T7943] device bridge_slave_1 entered promiscuous mode [ 234.693776][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.706433][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.715924][ T7940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.792950][ T7940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.850102][ T7940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.899052][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.911374][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.919211][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.927048][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 234.935421][ T7940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.985587][ T7943] team0: Port device team_slave_0 added [ 234.995016][ T7943] team0: Port device team_slave_1 added [ 235.019654][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.028642][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.036907][ T2611] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.044141][ T2611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.075170][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.083182][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.092048][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.100637][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.107663][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.116100][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.123471][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.131637][ T7946] device bridge_slave_0 entered promiscuous mode [ 235.139702][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.146766][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.154532][ T7946] device bridge_slave_1 entered promiscuous mode [ 235.220669][ T7943] device hsr_slave_0 entered promiscuous mode [ 235.278732][ T7943] device hsr_slave_1 entered promiscuous mode [ 235.318312][ T7943] debugfs: Directory 'hsr0' with parent '/' already present! [ 235.334884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.344464][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.376471][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.388086][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.420137][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.429098][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.438122][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.446883][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.455577][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.464038][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.472399][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.480938][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.489788][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.499862][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.537022][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 235.566909][ T7946] team0: Port device team_slave_0 added [ 235.593186][ T7946] team0: Port device team_slave_1 added [ 235.609938][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.622023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.629518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.680562][ T7946] device hsr_slave_0 entered promiscuous mode [ 235.708546][ T7946] device hsr_slave_1 entered promiscuous mode [ 235.748336][ T7946] debugfs: Directory 'hsr0' with parent '/' already present! [ 235.769795][ T7943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.837423][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.847200][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.855338][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.866429][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.874143][ T7943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.940456][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.948056][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.956226][ T7951] device bridge_slave_0 entered promiscuous mode [ 235.982184][ T7940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.993816][ T7943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.040365][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.047527][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.057382][ T7951] device bridge_slave_1 entered promiscuous mode [ 236.081603][ T7943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.127092][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.137077][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.146118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.154952][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.162222][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.170535][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.179366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.189596][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.196786][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.205003][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.213031][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.220924][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.230017][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.239361][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.247939][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.258093][ T7940] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.287442][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.296693][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.316258][ T7938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.327097][ T7938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.339697][ T7946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.370944][ T7946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.415519][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.424106][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.433170][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.442886][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.451741][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.460479][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.469174][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.476211][ T7952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.484168][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.492573][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.501342][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.509977][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.518624][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.525664][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.533652][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.542522][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.551164][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.560286][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.568866][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.576905][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.587961][ T7946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.634301][ T7946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.691766][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.716227][ T7935] device veth0_vlan entered promiscuous mode [ 236.726681][ T7951] team0: Port device team_slave_0 added [ 236.737829][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.746488][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.754120][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.762503][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.771089][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.779840][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.789455][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.797120][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.805650][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.815398][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.832425][ T7935] device veth1_vlan entered promiscuous mode [ 236.840655][ T7951] team0: Port device team_slave_1 added [ 236.863408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.875225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.883486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.892295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.901670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.910937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.970274][ T7951] device hsr_slave_0 entered promiscuous mode [ 237.018780][ T7951] device hsr_slave_1 entered promiscuous mode [ 237.058313][ T7951] debugfs: Directory 'hsr0' with parent '/' already present! [ 237.073991][ T7940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.101802][ T7940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.117215][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.125910][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.134878][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.143354][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.156876][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.175867][ T7938] device veth0_vlan entered promiscuous mode [ 237.196291][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.206277][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.213948][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.238715][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.247005][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.258903][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.267060][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.294366][ T7938] device veth1_vlan entered promiscuous mode [ 237.310664][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.321731][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.329499][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 17:03:01 executing program 0: [ 237.365486][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.386395][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.397444][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.406496][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 17:03:01 executing program 0: [ 237.417724][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.426472][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.448676][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.456388][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.498380][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.507221][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.516185][ T2611] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.523271][ T2611] bridge0: port 1(bridge_slave_0) entered forwarding state 17:03:01 executing program 0: [ 237.548668][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.557477][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.566061][ T2611] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.573194][ T2611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.581268][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.590817][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.600226][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.609221][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.618008][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.627755][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.641937][ T7940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.665277][ T7951] netdevsim netdevsim5 netdevsim0: renamed from eth0 17:03:01 executing program 0: [ 237.710387][ T7951] netdevsim netdevsim5 netdevsim1: renamed from eth1 17:03:01 executing program 1: [ 237.751560][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.769364][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.781448][ T7946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 17:03:02 executing program 0: [ 237.804160][ T7946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.842481][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 17:03:02 executing program 1: 17:03:02 executing program 0: [ 237.861992][ T7951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.910287][ T7951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.963521][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.978752][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.998205][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.006711][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.037737][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.055906][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.077072][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.086520][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.097543][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.105776][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.125782][ T7940] device veth0_vlan entered promiscuous mode [ 238.137679][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.146566][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.155498][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.163216][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.174012][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.184796][ T7940] device veth1_vlan entered promiscuous mode [ 238.208775][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.216804][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.225162][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.233506][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.242665][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.251071][ T2413] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.258703][ T2413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.267805][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.276849][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.285258][ T2413] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.292315][ T2413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.300978][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.309965][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.335276][ T7943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.345977][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.357416][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.365991][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.374262][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.385110][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.393986][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.402985][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.411724][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.420433][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.429182][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.437948][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.446703][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.455083][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.477001][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 17:03:02 executing program 2: [ 238.513399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.521670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.562205][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.594077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.608975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.624445][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.655201][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.664323][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.674817][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.685194][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.703421][ T7943] device veth0_vlan entered promiscuous mode [ 238.713348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.722344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.732530][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.739622][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.747336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.757323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.766332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.774829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.783694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.792610][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.800660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.808756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.816655][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.828271][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.837046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.845963][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.853048][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.862875][ T7946] device veth0_vlan entered promiscuous mode [ 238.872159][ T7943] device veth1_vlan entered promiscuous mode [ 238.886133][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.894663][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.909713][ T7946] device veth1_vlan entered promiscuous mode [ 238.934071][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.942475][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.951262][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.960241][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.969143][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.977774][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.986484][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.995198][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.003662][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.012038][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.022862][ T7951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.034556][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.058063][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.078891][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.089320][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.117442][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.135782][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 239.135819][ T27] audit: type=1804 audit(1578243783.357:31): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/0/file0/bus" dev="ramfs" ino=28192 res=1 [ 239.151144][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.188524][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.216185][ T27] audit: type=1804 audit(1578243783.357:32): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/0/file0/bus" dev="ramfs" ino=28192 res=1 17:03:03 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 239.274962][ T27] audit: type=1804 audit(1578243783.357:33): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/0/file0/bus" dev="ramfs" ino=28192 res=1 [ 239.303403][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.318541][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.335460][ T8005] IPVS: ftp: loaded support on port[0] = 21 [ 239.354325][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.363215][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.377033][ T7951] device veth0_vlan entered promiscuous mode [ 239.385326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.399957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.407253][ T27] audit: type=1804 audit(1578243783.627:34): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/1/file0/bus" dev="ramfs" ino=28709 res=1 [ 239.446329][ T27] audit: type=1804 audit(1578243783.627:35): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/1/file0/bus" dev="ramfs" ino=28709 res=1 [ 239.476446][ T27] audit: type=1804 audit(1578243783.627:36): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/1/file0/bus" dev="ramfs" ino=28709 res=1 [ 239.525521][ T7951] device veth1_vlan entered promiscuous mode [ 239.606237][ T8020] IPVS: ftp: loaded support on port[0] = 21 17:03:03 executing program 4: gettid() dup(0xffffffffffffffff) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x8) unshare(0x60040000) 17:03:03 executing program 5: 17:03:03 executing program 0: 17:03:03 executing program 1: 17:03:03 executing program 2: 17:03:03 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 17:03:04 executing program 1: open$dir(0x0, 0xe892d609ba6324e3, 0x0) 17:03:04 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xb, 0x0, 0x0) [ 239.828421][ T8032] IPVS: ftp: loaded support on port[0] = 21 [ 239.851241][ T27] audit: type=1804 audit(1578243784.077:37): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/2/file0/bus" dev="ramfs" ino=28765 res=1 [ 239.861295][ T7] tipc: TX() has been purged, node left! 17:03:04 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) 17:03:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000300)=""/255) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, @fd}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) [ 240.004629][ T27] audit: type=1804 audit(1578243784.117:38): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/2/file0/bus" dev="ramfs" ino=28765 res=1 [ 240.096739][ T27] audit: type=1804 audit(1578243784.117:39): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450368236/syzkaller.SsgXA4/2/file0/bus" dev="ramfs" ino=28765 res=1 [ 240.127254][ T8050] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:03:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:03:04 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000004c0)="ca", 0x1}], 0x1) ftruncate(r0, 0x4000ff9) [ 240.224988][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.245751][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 17:03:04 executing program 4: gettid() dup(0xffffffffffffffff) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x8) unshare(0x60040000) 17:03:04 executing program 2: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb0}, 0x48) 17:03:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$inet(r0, 0x0, 0x0) 17:03:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:03:04 executing program 5: r0 = socket(0x15, 0x80005, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffff}, 0x20) 17:03:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='X', 0x1, 0x0, 0x0, 0x0) [ 240.612281][ C0] hrtimer: interrupt took 46341 ns 17:03:04 executing program 3: mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mlockall(0x0) [ 240.647877][ T8080] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 240.724117][ T8089] IPVS: ftp: loaded support on port[0] = 21 17:03:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0x0) 17:03:05 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x180042, 0x0) write$char_usb(r0, 0x0, 0x0) 17:03:05 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/159) 17:03:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 17:03:05 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000100)='./file0\x00', 0x0) 17:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2100, 0x0) 17:03:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 17:03:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 17:03:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") socket$inet6_dccp(0xa, 0x6, 0x0) 17:03:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, r1, &(0x7f0000000240), 0x0) 17:03:05 executing program 1: mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 17:03:05 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x515b02, 0x0) 17:03:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev}]}}}]}, 0x40}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000440)="240000005a001f02", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r4}, 0x8) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17:03:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="18b551ebc363eb0eb778e0a2851cba73879b9a75af52f552088a630fb0428b22a131ddc0bc1e65b35fa010e6ee058f9cfeeb1df59bc170b76a20ac569be6ed439d3479bd830de819150b77e8298ff70e2886f586ec2eee96ef191b6b588c8d7f10cd3d473bb87c69f08ca2fd963126c751870388d201a75218f735a703802812eed6cd3df9ed5412f4f4c052d79aaf2cf9e0d203", 0x94}, {&(0x7f0000000040)="4622bd43a6c8e70f601da04e42c4421e00ddea0574f5eb6611d442204ff0da", 0x1f}, {&(0x7f0000000380)="235a13c5c20f4e28ba45e21636bfc9d34036242de8cd75a3c0043475a420ea4dec843da3b904e00d67d55c048195f1d0a2146b6b17953919cfc6ac47dc35002173b195cd1c4854d3e150fe622ce4220d4bf3bf3f11", 0x55}, {&(0x7f0000000640)="439136fcc5a5a310c53046773e205cff5f9345265a835608519883ccad584341dd0bc33f1b4533167e8303d7fe9ee7702ae72eec04e883a5bc5fe0bd43a8737b20890223ec35a9ab04d59ebd95ded2759a6f259b6039e8092b9c51ff658a6194e9097f0b018b47c74a7a1889ce326cca461ddf64eb1f0a382f83af9f42d27e90fa91b077a339ec1f00eba2ec5344bfda20c8f1cc1d5780104afb450e819ce8944aac487c22013b9ca857b225fdd82e985770dcc9c62133eedd13fdcc99e2f2beac406c7315", 0xc5}, {&(0x7f0000000080)="1008dc5efd79bed0bea617012026ce44948313f83c312de664b8ca8ef087951e310900def09877435f9566ef013ec3eb12a65f53", 0x34}, {&(0x7f0000000740)="c62f44c0f65528e351467adb19846eaea52615a3fb5801cc252f5a196b9b56a93bf459899bc88915c2c311d0912d1581e3beacd588d68d6e3a9532b70996a3c614f86f27c6d7c128cc0c4d650efbed228ba65bba7708656d100f1f7891b241726c3b4c938b872b9271a9c59e71b5ebe7d831681d18", 0x75}, {&(0x7f0000002340)="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", 0x152}], 0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:03:05 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x2a8, 0x100, 0x1a8, 0x240, 0x0, 0x100, 0x240, 0x240, 0x240, 0x240, 0x240, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 17:03:05 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:03:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:06 executing program 1: syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:03:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000024000705000000000001000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000020a0001006e6574656d0000f11b000200000000000000000000000000000000200000000000000000da5bc4579c2d680500000000000000b86987644cfafe21bca44aea1b803e521a4a0fc9c7bf7dc55cd10f1314e73c8d8966b477e5f9f65a747730daab5d164ca0ce83564989736e35a71b415c9832eedcb30a1871795d87306932f56325093ec69420b7c0af80aa5afef2b10743831e516e517331ac0c05548502ed71afc1590529bf16359422895f7228aadc792b659f8243f473fd23f3d496f772822bbf2bd8833b9782132c369d7ad54b0d74bc83d39a3b0ff1afa5"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 17:03:06 executing program 4: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:03:06 executing program 4: clock_gettime(0x0, &(0x7f0000000080)) 17:03:06 executing program 0: sched_yield() epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 17:03:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe8) 17:03:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 17:03:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:03:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:03:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000300)=""/255) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, @fd}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x4305, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast, @remote}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a121d5", 0x0, "feefd1"}}}}}}, 0x0) 17:03:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 17:03:07 executing program 4: umount2(&(0x7f0000000540)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:03:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) 17:03:07 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x3, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, r0+30000000}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, r1+30000000}}, 0x0) 17:03:07 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:03:07 executing program 2: r0 = socket(0x10, 0x80002, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x5, 0x0, &(0x7f0000000040)) 17:03:07 executing program 4: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0045878, 0x0) 17:03:07 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, 0x0) 17:03:07 executing program 3: 17:03:07 executing program 4: 17:03:07 executing program 5: 17:03:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 242.847874][ T8199] kvm: pic: single mode not supported [ 243.458304][ T7] tipc: TX() has been purged, node left! 17:03:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) 17:03:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:07 executing program 2: 17:03:07 executing program 5: [ 243.648338][ T7] tipc: TX() has been purged, node left! [ 243.718653][ T7] tipc: TX() has been purged, node left! 17:03:08 executing program 5: 17:03:08 executing program 2: [ 243.781271][ T8258] kvm: pic: single mode not supported 17:03:08 executing program 5: [ 243.900601][ T8266] kvm: pic: single mode not supported 17:03:08 executing program 2: 17:03:08 executing program 5: 17:03:08 executing program 3: 17:03:08 executing program 5: 17:03:08 executing program 2: 17:03:08 executing program 0: 17:03:08 executing program 4: 17:03:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:08 executing program 3: 17:03:08 executing program 4: 17:03:08 executing program 2: 17:03:08 executing program 5: 17:03:08 executing program 0: 17:03:09 executing program 3: 17:03:09 executing program 2: 17:03:09 executing program 5: 17:03:09 executing program 4: 17:03:09 executing program 3: 17:03:09 executing program 0: [ 244.074879][ T8274] kvm: pic: single mode not supported 17:03:09 executing program 5: 17:03:09 executing program 2: 17:03:09 executing program 4: 17:03:09 executing program 3: 17:03:09 executing program 1: 17:03:09 executing program 0: 17:03:09 executing program 5: 17:03:09 executing program 0: 17:03:09 executing program 3: 17:03:09 executing program 2: 17:03:09 executing program 4: 17:03:10 executing program 5: 17:03:10 executing program 0: 17:03:10 executing program 1: 17:03:10 executing program 3: 17:03:10 executing program 2: 17:03:10 executing program 5: 17:03:10 executing program 4: 17:03:10 executing program 0: 17:03:10 executing program 3: 17:03:10 executing program 1: 17:03:10 executing program 2: 17:03:10 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) 17:03:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x115}, 0x9c) 17:03:10 executing program 0: 17:03:10 executing program 2: 17:03:10 executing program 5: 17:03:10 executing program 3: 17:03:10 executing program 1: 17:03:11 executing program 3: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092506b86807020aab087a0500000001000393210001c0f0020000000000010000000000039815fa2c1ec28648000000b9d95662070000bc000c04f0036cdf0d11512fd633d440000400600720d3d5bbc91a3e2e80772c05dafd5a32e273fc83ab82d718f74cec18444ef90d475ef8b29d3ef3d92c83170e5bba2e177312e081bea05d44021e8ca062914a463ae4f5df77bc4cb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0734ba3dffe5f5aa1dd1890058a10000050000001fe4af000041f0d48f6f0000080548deac279cc4848e3825924509260e26429fbe11017d627403050efaddd3254395c500", 0xfffffffffffffe81) 17:03:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50}}}, 0xb8}}, 0x0) 17:03:11 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:03:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000040)="4622bd43a6c8e70f601da04e42c4421e00ddea0574f5eb66", 0x18}, {&(0x7f0000000380)="235a13c5c20f4e28ba45e21636bfc9d34036242de8cd75a3c0043475a420ea4dec843da3b904e00d67d55c048195f1d0a2146b6b17953919cfc6ac47dc35002173b195cd1c4854d3e1", 0x49}, {&(0x7f0000000640)="439136fcc5a5a310c53046773e205cff5f9345265a835608519883ccad584341dd0bc33f1b4533167e8303d7fe9ee7702ae72eec04e883a5bc5fe0bd43a8737b20890223ec35a9ab04d59ebd95ded2759a6f259b6039e8092b9c51ff658a6194e9097f0b018b47c74a7a1889ce326cca461ddf64eb1f0a382f83af9f42d27e90fa91b077a339ec1f00eba2ec5344bfda20c8f1cc1d", 0x95}, {&(0x7f0000000080)="1008dc5efd79bed0bea617012026ce44948313f83c312de664b8ca8ef087951e310900def09877", 0x27}, {&(0x7f0000000740)="c62f44c0f65528e351467adb19846eaea52615a3fb5801cc252f5a196b9b56a93bf459899bc88915c2c311d0912d1581e3beacd588d68d6e3a9532b70996a3c614f86f27c6d7c128cc0c4d650efbed228ba65bba7708656d100f1f7891b241726c3b4c938b872b9271a9c59e71b5ebe7d831681d186a3157e73c", 0x7a}], 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:03:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x20) 17:03:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x115}, 0x9c) 17:03:11 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r4}, 0x18) 17:03:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="18b551ebc363eb0eb778e0a2851cba73879b9a75af52f552088a630fb0428b22a131ddc0bc1e65b35fa010e6ee058f9cfeeb1df59bc170b76a20ac569be6ed439d3479bd830de819150b", 0x4a}, {&(0x7f0000000040)="4622bd43a6c8e70f601da04e42c4421e00ddea0574f5eb66", 0x18}, {&(0x7f0000000380)="235a13c5c20f4e28ba45e21636bfc9d34036242de8cd75a3c0043475a420ea4dec843da3b904e00d67d55c048195f1d0a2146b6b17953919cfc6ac47dc35002173b195cd1c4854d3e150fe", 0x4b}, {&(0x7f0000000640)="439136fcc5a5a310c53046773e205cff5f9345265a835608519883ccad584341dd0bc33f1b4533167e8303d7fe9ee7702ae72eec04e883a5bc5fe0bd43a8737b20890223ec35a9ab04d59ebd95ded2759a6f259b6039e8092b9c51ff658a6194e9097f0b018b47c74a7a1889ce326cca461ddf64eb1f0a382f83af9f42d27e90fa91b077a339ec1f00eba2ec5344bfda20c8f1cc1d5780104afb450e819ce8944aac487c22013b9ca857b225fdd82e985770dcc9c62133eedd13fdcc99e2f2beac406c7315d77e", 0xc7}, {&(0x7f0000000080)="1008dc5efd79bed0bea617012026ce44948313f83c312de664b8ca8ef087951e310900def09877435f9566ef01", 0x2d}, {&(0x7f0000000740)="c62f44c0f65528e351467adb19846eaea52615a3fb5801cc252f5a196b9b56a93bf459899bc88915c2c311d0912d1581e3beacd588d68d6e3a9532b70996a3c614f86f27c6d7c128cc0c4d650efbed228ba65bba7708656d100f1f7891b241726c3b4c938b872b9271a9c59e71b5ebe7d831681d186a3157e73cb9a0d5a3892be4861f958d8570b20ab714be5fbd4ef796e91432e3616d46d0a6b41fbbb3469a2bb554d19c00adb5d192e700f88cf2c83fa5ede44bc429b59bdf42dd71193a2b2484177df5abd1c88ce93a59c728cb72b44813aab70958dd4cc2203fc55e24dd69750c7c927316dd8070", 0xea}, {&(0x7f0000002340)="cb6cda8c09141d7011b232b9c6333a9180452498d7b0d5b6ae7b87554760ed2a72a85720eb5c2c8d6bf8e8e786bc1ffb04d15b33e3c9cea7db6669a18234dbae5d6bf8bda660701ed4e259db6f0bee05914f8932798cc91eddaa6fbf39f75f9c2ba3eeb9d43881e7a89f04b90308120bb20cb352d21d99dbd308c50155357afbe7ba930aef08faeccec8099d35e9e0e3a5cb6a6bdb0867bc00db5b3f1628bd895848468ac443623e0001903c0cda01f3096853cd35a6", 0xb6}], 0x7) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:03:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20) 17:03:11 executing program 2: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc0000001c00071bab0925000900070007", 0x11) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) close(r3) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 17:03:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000380)) [ 245.382300][ T8321] kvm: pic: single mode not supported [ 247.235033][ T3991] ================================================================== [ 247.248553][ T3991] BUG: KCSAN: data-race in atime_needs_update / shmem_unlink [ 247.255928][ T3991] [ 247.258261][ T3991] write to 0xffff888124f1c4b0 of 16 bytes by task 8076 on cpu 1: [ 247.265979][ T3991] shmem_unlink+0xe8/0x150 [ 247.270402][ T3991] vfs_unlink+0x225/0x3e0 [ 247.274741][ T3991] do_unlinkat+0x32b/0x530 [ 247.279169][ T3991] __x64_sys_unlink+0x3b/0x50 [ 247.283848][ T3991] do_syscall_64+0xcc/0x3a0 [ 247.288360][ T3991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.294244][ T3991] [ 247.296579][ T3991] read to 0xffff888124f1c4b8 of 8 bytes by task 3991 on cpu 0: [ 247.304136][ T3991] atime_needs_update+0x2a2/0x360 [ 247.309173][ T3991] touch_atime+0x63/0x190 [ 247.313519][ T3991] do_readlinkat+0x1d8/0x220 [ 247.318113][ T3991] __x64_sys_readlink+0x51/0x70 [ 247.322982][ T3991] do_syscall_64+0xcc/0x3a0 [ 247.327501][ T3991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.333385][ T3991] [ 247.335718][ T3991] Reported by Kernel Concurrency Sanitizer on: [ 247.341886][ T3991] CPU: 0 PID: 3991 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 247.349688][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.359746][ T3991] ================================================================== [ 247.367803][ T3991] Kernel panic - not syncing: panic_on_warn set ... [ 247.374418][ T3991] CPU: 0 PID: 3991 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 17:03:11 executing program 4: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000003c0)="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", 0xfc) [ 247.382228][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.392286][ T3991] Call Trace: [ 247.395591][ T3991] dump_stack+0x11d/0x181 [ 247.399941][ T3991] panic+0x210/0x640 [ 247.403869][ T3991] ? vprintk_func+0x8d/0x140 [ 247.408471][ T3991] kcsan_report.cold+0xc/0xd [ 247.413082][ T3991] kcsan_setup_watchpoint+0x3fe/0x460 [ 247.418463][ T3991] __tsan_read8+0xc6/0x100 [ 247.422890][ T3991] atime_needs_update+0x2a2/0x360 [ 247.427933][ T3991] touch_atime+0x63/0x190 17:03:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x4, 0x0, 0x4}, 0x3c) [ 247.432265][ T3991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.438536][ T3991] do_readlinkat+0x1d8/0x220 [ 247.443147][ T3991] __x64_sys_readlink+0x51/0x70 [ 247.448033][ T3991] do_syscall_64+0xcc/0x3a0 [ 247.452555][ T3991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.458562][ T3991] RIP: 0033:0x7f50b09e8577 [ 247.463001][ T3991] Code: f0 ff ff 77 02 f3 c3 48 8b 15 bd 38 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 90 90 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 38 2b 00 31 d2 48 29 c2 64 [ 247.482611][ T3991] RSP: 002b:00007ffd54ad2c08 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 247.491038][ T3991] RAX: ffffffffffffffda RBX: 00000000011f3250 RCX: 00007f50b09e8577 [ 247.499219][ T3991] RDX: 00000000000003fc RSI: 00007ffd54ad3034 RDI: 00007ffd54ad2c30 [ 247.507192][ T3991] RBP: 00000000000003fc R08: 00000000011f30d0 R09: 00007f50b0a3d1d0 [ 247.515166][ T3991] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 247.523138][ T3991] R13: 0000000000000000 R14: 00000000011fb2f0 R15: 00000000011f3250 [ 247.532739][ T3991] Kernel Offset: disabled [ 247.537068][ T3991] Rebooting in 86400 seconds..