Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 36.727645] audit: type=1800 audit(1568377315.581:33): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.749041] audit: type=1800 audit(1568377315.581:34): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.381922] audit: type=1400 audit(1568377318.231:35): avc: denied { map } for pid=7406 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. 2019/09/13 12:22:04 fuzzer started [ 45.905837] audit: type=1400 audit(1568377324.751:36): avc: denied { map } for pid=7416 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/13 12:22:06 dialing manager at 10.128.0.105:36671 2019/09/13 12:22:06 syscalls: 2482 2019/09/13 12:22:06 code coverage: enabled 2019/09/13 12:22:06 comparison tracing: enabled 2019/09/13 12:22:06 extra coverage: extra coverage is not supported by the kernel 2019/09/13 12:22:06 setuid sandbox: enabled 2019/09/13 12:22:06 namespace sandbox: enabled 2019/09/13 12:22:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/13 12:22:06 fault injection: enabled 2019/09/13 12:22:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/13 12:22:06 net packet injection: enabled 2019/09/13 12:22:06 net device setup: enabled 12:23:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) [ 157.224995] audit: type=1400 audit(1568377436.071:37): avc: denied { map } for pid=7433 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=72 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 157.308095] IPVS: ftp: loaded support on port[0] = 21 12:23:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) [ 157.414532] chnl_net:caif_netlink_parms(): no params data found [ 157.468881] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.475697] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.485055] device bridge_slave_0 entered promiscuous mode [ 157.493230] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.501386] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.509921] device bridge_slave_1 entered promiscuous mode [ 157.532644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.548525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.601454] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.609775] team0: Port device team_slave_0 added [ 157.615577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.619708] IPVS: ftp: loaded support on port[0] = 21 [ 157.623924] team0: Port device team_slave_1 added [ 157.633072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.641773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:23:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0) [ 157.699205] device hsr_slave_0 entered promiscuous mode [ 157.737475] device hsr_slave_1 entered promiscuous mode [ 157.779726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.796848] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.833189] IPVS: ftp: loaded support on port[0] = 21 [ 157.850864] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.857387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.864336] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.870777] bridge0: port 1(bridge_slave_0) entered forwarding state 12:23:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) add_key(&(0x7f00000017c0)='ceph\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r2, 0x0) [ 158.059532] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 158.065650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.090941] chnl_net:caif_netlink_parms(): no params data found [ 158.100676] IPVS: ftp: loaded support on port[0] = 21 [ 158.128818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:23:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) [ 158.211700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.233693] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.253035] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.269396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.290645] chnl_net:caif_netlink_parms(): no params data found [ 158.308794] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.315171] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.337447] device bridge_slave_0 entered promiscuous mode [ 158.345590] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.360080] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.370201] device bridge_slave_1 entered promiscuous mode [ 158.383966] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.393286] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.423630] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.430096] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.437569] device bridge_slave_0 entered promiscuous mode [ 158.457705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.472882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.480993] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.489810] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.497935] device bridge_slave_1 entered promiscuous mode [ 158.509457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 12:23:57 executing program 5: gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="c5", 0x1}, {&(0x7f0000000080)='8', 0x100000}], 0x2) [ 158.521793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.530045] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.537707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.550407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.558498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.569009] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.576403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.591989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.620600] IPVS: ftp: loaded support on port[0] = 21 [ 158.630115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.639702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.651407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.661857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.664799] IPVS: ftp: loaded support on port[0] = 21 [ 158.671330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.690344] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.699981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.709252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.730317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.739438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.747850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.755490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.763412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.772651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.784623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 158.809638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.817526] team0: Port device team_slave_0 added [ 158.822939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.833264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.852957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 158.860539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.868549] team0: Port device team_slave_0 added [ 158.875129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.882929] team0: Port device team_slave_1 added [ 158.898500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.906785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.934741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.948061] team0: Port device team_slave_1 added [ 158.957253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.965025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.975067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.986008] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 158.993186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.004687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.046142] chnl_net:caif_netlink_parms(): no params data found [ 159.078663] device hsr_slave_0 entered promiscuous mode [ 159.117553] device hsr_slave_1 entered promiscuous mode [ 159.218183] device hsr_slave_0 entered promiscuous mode [ 159.256568] device hsr_slave_1 entered promiscuous mode [ 159.296761] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.304144] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.332610] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.339852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.355341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.384612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.434241] chnl_net:caif_netlink_parms(): no params data found [ 159.453405] chnl_net:caif_netlink_parms(): no params data found [ 159.459852] audit: type=1400 audit(1568377438.301:38): avc: denied { associate } for pid=7434 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 159.519388] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.529902] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.537793] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.544682] device bridge_slave_0 entered promiscuous mode [ 159.552879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.576525] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.596039] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.605570] device bridge_slave_1 entered promiscuous mode [ 159.671754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.682404] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.688896] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.702304] device bridge_slave_0 entered promiscuous mode [ 159.714462] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.725867] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.733150] device bridge_slave_0 entered promiscuous mode [ 159.750802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.770287] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.781866] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.789303] device bridge_slave_1 entered promiscuous mode [ 159.795593] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.802434] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.810618] device bridge_slave_1 entered promiscuous mode [ 159.836710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.843957] team0: Port device team_slave_0 added [ 159.853191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.863545] team0: Port device team_slave_1 added 12:23:58 executing program 0: [ 159.903815] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.920633] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.936976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.945319] bond0: Enslaving bond_slave_0 as an active interface with an up link 12:23:58 executing program 0: [ 159.961189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.982346] 8021q: adding VLAN 0 to HW filter on device bond0 12:23:58 executing program 0: [ 160.018788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.025635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.062872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.089008] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.100364] team0: Port device team_slave_0 added 12:23:58 executing program 0: [ 160.112599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.132122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.147029] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.154505] team0: Port device team_slave_0 added 12:23:59 executing program 0: [ 160.165724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.188285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.195523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:23:59 executing program 0: 12:23:59 executing program 0: [ 160.214582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.221884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.237597] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.245048] team0: Port device team_slave_1 added [ 160.253416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.260171] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.328200] device hsr_slave_0 entered promiscuous mode [ 160.366698] device hsr_slave_1 entered promiscuous mode [ 160.400026] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.407407] team0: Port device team_slave_1 added [ 160.412840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.421058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.432201] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.439928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.447652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.459164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.472112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.481730] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.488023] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.497019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.504748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.512669] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.519070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.589211] device hsr_slave_0 entered promiscuous mode [ 160.627024] device hsr_slave_1 entered promiscuous mode [ 160.667087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.678157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.694872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.702992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.710183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.718217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.726692] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.733033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.740420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.748345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.755976] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.762357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.771215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.779590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.838210] device hsr_slave_0 entered promiscuous mode [ 160.876531] device hsr_slave_1 entered promiscuous mode [ 160.918041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 160.926609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.933727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.941620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.950106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.958120] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.964501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.978620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.986137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.998008] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 161.005639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.018127] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.025825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.038703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.047308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.054497] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 161.061778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.073287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.081860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.090718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.098922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.108410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.115533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.123582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.133332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.154339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.164247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.172149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.183413] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.194877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.211412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.218539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.228012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.235998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.244225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.255477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.279160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 161.286831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.294330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.302114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.310132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.320186] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.327351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.345152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.353492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 161.369743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.381883] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 161.388163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.397515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.405909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.413202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.421484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.429702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.436683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.456191] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.465647] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 161.483802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.492414] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.498889] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.512667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.523293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.534195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.543716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.552060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.560040] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.566450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.573887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.613816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.631365] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.647616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.655614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.667109] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.678235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.697180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.704866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 12:24:00 executing program 1: [ 161.736035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.744529] audit: type=1400 audit(1568377440.601:39): avc: denied { create } for pid=7478 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.770185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.785568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.794375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.797313] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 161.806990] audit: type=1400 audit(1568377440.641:40): avc: denied { write } for pid=7478 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.811413] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.839223] audit: type=1400 audit(1568377440.641:41): avc: denied { read } for pid=7478 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 161.853173] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.875283] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 161.885189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.896903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.905886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.938993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.952507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.961580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.969327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.977441] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 161.978055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.994023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.997529] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 162.002190] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.015095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.024816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 12:24:00 executing program 0: [ 162.037715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.045519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.053056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.065345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.084047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.107039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.116837] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 162.124537] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.133786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.148964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.155709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.167397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.175351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.183484] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.189901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.197424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.204949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.215240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.225762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.240568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.248413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.257406] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.263746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.270921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.279354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.288752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.296870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.304158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.312557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.320596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.330950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.342900] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.349073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.356424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.364279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.372503] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.378909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.389636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.402667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.410775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.418868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.426946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.435189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.447482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.457693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.464975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.474365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.482585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.491582] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.501065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.509932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.519952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.529046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.537449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.545002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.553570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.570155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.578516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.588234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.595857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.605630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.618750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.632892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.642862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.650666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.656977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.672380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.691985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.707123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.719707] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.732701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.740455] hrtimer: interrupt took 35009 ns [ 162.741454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.761307] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.771489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.794567] 8021q: adding VLAN 0 to HW filter on device batadv0 12:24:01 executing program 1: [ 162.824594] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.886435] 8021q: adding VLAN 0 to HW filter on device batadv0 12:24:02 executing program 4: 12:24:02 executing program 2: 12:24:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) add_key(&(0x7f00000017c0)='ceph\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r2, 0x0) 12:24:02 executing program 1: 12:24:02 executing program 0: 12:24:02 executing program 5: gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="c5", 0x1}, {&(0x7f0000000080)='8', 0x100000}], 0x2) 12:24:02 executing program 1: 12:24:02 executing program 4: 12:24:02 executing program 2: 12:24:02 executing program 0: 12:24:02 executing program 4: 12:24:02 executing program 2: 12:24:02 executing program 1: 12:24:02 executing program 0: 12:24:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) add_key(&(0x7f00000017c0)='ceph\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r2, 0x0) 12:24:02 executing program 4: 12:24:02 executing program 2: 12:24:02 executing program 5: 12:24:02 executing program 1: 12:24:02 executing program 0: 12:24:02 executing program 1: 12:24:02 executing program 0: 12:24:02 executing program 5: 12:24:02 executing program 2: 12:24:03 executing program 4: 12:24:03 executing program 0: 12:24:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8108551b, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@empty, @in6=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) add_key(&(0x7f00000017c0)='ceph\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r2, 0x0) 12:24:03 executing program 1: 12:24:03 executing program 5: 12:24:03 executing program 4: 12:24:03 executing program 2: 12:24:03 executing program 0: 12:24:03 executing program 1: 12:24:03 executing program 5: 12:24:03 executing program 2: 12:24:03 executing program 0: 12:24:03 executing program 4: 12:24:03 executing program 1: 12:24:03 executing program 3: 12:24:03 executing program 5: 12:24:03 executing program 0: 12:24:03 executing program 4: 12:24:03 executing program 2: 12:24:03 executing program 1: 12:24:03 executing program 5: 12:24:03 executing program 0: 12:24:03 executing program 2: 12:24:03 executing program 1: 12:24:03 executing program 4: 12:24:04 executing program 3: 12:24:04 executing program 5: 12:24:04 executing program 2: 12:24:04 executing program 0: 12:24:04 executing program 1: 12:24:04 executing program 4: 12:24:04 executing program 5: 12:24:04 executing program 3: 12:24:04 executing program 2: 12:24:04 executing program 0: 12:24:04 executing program 1: 12:24:04 executing program 4: 12:24:04 executing program 3: 12:24:04 executing program 0: 12:24:04 executing program 2: 12:24:04 executing program 5: 12:24:04 executing program 4: 12:24:04 executing program 1: 12:24:04 executing program 3: 12:24:04 executing program 2: 12:24:04 executing program 0: 12:24:04 executing program 5: 12:24:04 executing program 4: 12:24:04 executing program 3: 12:24:04 executing program 1: 12:24:04 executing program 0: 12:24:04 executing program 2: 12:24:04 executing program 5: 12:24:04 executing program 4: 12:24:04 executing program 5: 12:24:04 executing program 3: 12:24:04 executing program 2: 12:24:04 executing program 1: 12:24:04 executing program 0: 12:24:04 executing program 5: 12:24:05 executing program 4: 12:24:05 executing program 0: 12:24:05 executing program 1: 12:24:05 executing program 3: 12:24:05 executing program 4: 12:24:05 executing program 2: 12:24:05 executing program 5: 12:24:05 executing program 0: 12:24:05 executing program 2: 12:24:05 executing program 1: 12:24:05 executing program 4: 12:24:05 executing program 3: 12:24:05 executing program 5: 12:24:05 executing program 2: 12:24:05 executing program 0: 12:24:05 executing program 1: 12:24:05 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bond\x00', 0x10) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x24000000) 12:24:05 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(0xffffffffffffffff) close(r0) 12:24:05 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x5b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 12:24:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$alg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d02d15aaeecf2736d448a5f2781efd99ab69f44e6af81c6f1c9b648f0f3bd52a002993feba4da3a3cc07", 0x2a}, {&(0x7f0000000540)="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", 0xfd7}], 0x2}, 0x0) recvfrom(r2, &(0x7f00000017c0)=""/4096, 0x1000, 0x2040, 0x0, 0x0) 12:24:05 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000000)='9p\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$revoke(0x3, r2) 12:24:05 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x400502, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000380)={0x2002, 0x106000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="f7", 0xfffffe96}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000140)={0x2c}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000, 0x0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/81, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000280)={0x2, 0x804, 0x2, {0x77359400}, {0x77359400}, {0x1, 0x6, 0x15, 0x7}, 0x1, @can={{0x0, 0x0, 0x8000, 0x1}, 0x7, 0x5, 0x0, 0x0, "bea1d3515a4b469f"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2044000) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "906ec06abebf107e", "3f6059ccf715259ed9a5c987c22674af", "53c7167b", "730766f3ba5935db"}, 0x28) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x100) [ 166.797172] 9pnet_virtio: no channels available for device 127.0.0.1 12:24:05 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x5b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 12:24:05 executing program 4: fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz1\x00', {0x9, 0x0, 0x6a, 0x8f60}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x3f, 0x20, 0x434, 0x401, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100000001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffff0001], [0x3, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x1, 0x0, 0x7, 0x10001, 0x0, 0x0, 0x6, 0x40, 0x7fff, 0x0, 0x80000000, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x4, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x7f, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7a, 0x7fff, 0x0, 0x9, 0x800], [0x2, 0x0, 0x0, 0xec, 0x10000, 0x0, 0x8de, 0x10001, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x56e4, 0x0, 0x3, 0x10000, 0xfffffffffffff000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x6878000000000000, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x60ef, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x6, 0x2, 0x100, 0x2]}, 0x45c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="10000200", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000020000000000"], 0x3c, 0x6f9d5a52b8470da1) setfsuid(r3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 12:24:05 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x4004}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x1, 0x5}, 'port1\x00', 0x80, 0x40, 0xb8a6, 0x3681, 0x8, 0xc444, 0x5, 0x0, 0x6, 0x5}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0xab) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000140)={r2, 0x4}) setreuid(0x0, 0xee00) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x400000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000001c0)={0x4, 0x3032344d, 0x6fb, 0x2, 0x1, @discrete={0x6, 0x4}}) [ 166.877249] 9pnet_virtio: no channels available for device 127.0.0.1 12:24:05 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x2, {0x0, 0x0, 0x100, 0x0, 0x4}}) [ 166.976129] audit: type=1400 audit(1568377445.821:42): avc: denied { map } for pid=7739 comm="syz-executor.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28318 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 12:24:05 executing program 0: r0 = socket(0x10, 0x400000000080803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{}, {0x2, 0x2, r1}, {0x2, 0x4}], {}, [], {0x10, 0x5}, {0x20, 0x2}}, 0x3c, 0x6f9d5a52b8470da1) chown(&(0x7f0000000000)='./file0\x00', r1, 0xffffffffffffffff) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'security.', 'system.posix_acl_access\x00'}) write(r0, &(0x7f00000000c0)="240000001a00cd18e289d3659248001d020b49ffede1ff00800228000800020001000000", 0x24) [ 167.022812] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:24:06 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x2, {0x0, 0x0, 0x100, 0x0, 0x4}}) 12:24:06 executing program 3: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00\to\xf66\xafY\x1dc\xeb\xeaFf\aI\xd7b%\xed\x00\x00\x00\x00\xd2\x8f\x17\xdb\xd2\xa9\xfe\xd9\xd7\xceF\x8d\x01\x00\x00\x00\x00\x00\x00\x009\x00!\b\x1b\xf5`eH\xa3V>\xb4\xe9\xb9{,,\x18!\x90\xba<_)\x13\x01\x02&\x8f\xf0\xd3}\x81\xf2F\xb0\xff\xda\b(\xde$\x8f2\xaec\x99\a\xcfY\x14=/Tt\x10\xb2\xcc\xd7\xea\xf8-e\x18\x13\xbc\xa4\xd4\xf70\x02\x10J\xb1\xe7\xd9\xb1\x81)\xee\xb2}\xcc\xfd\b\x1d\x00\x00\x00\x00\x01\x00') r3 = inotify_init1(0x80000) sendfile(r3, r2, 0x0, 0x9) 12:24:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', r4}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 12:24:06 executing program 0: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0x138, 0x2a0, 0x0, 0x2a0, 0x138, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x4, 0x1, 0x0, [0x6, 0xdd, 0x0, 0x100000001, 0x2, 0xc171, 0x7, 0x1, 0x1, 0xffffffffffffffe1, 0x413, 0x9, 0x5, 0x0, 0x3ff, 0xffffffffffffffff], 0xb}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@mcast2, @remote, [0x0, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'ipddp0\x00', 'vcan0\x00', {0xff}, {}, 0x6c, 0x1f, 0x1, 0x42}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xf, 0x2, 0x9, 0x1}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x6, 0x4, 0x1, [0x12880000000000, 0x1, 0x10001, 0x6, 0x0, 0x3, 0xe3fa, 0x3, 0x100, 0x4, 0x1, 0x8, 0xff, 0x5, 0x5, 0x6], 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x5f2d, 0x1, 0xfffffffffffffff7}, {0xffffffffffffffff, 0x4, 0x8}, 0xbc, 0x8001}}}, {{@ipv6={@mcast1, @mcast1, [0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xffffffff], 'bond0\x00', 'sit0\x00', {0x7f}, {}, 0x2b, 0x7fffffff, 0x6, 0x67}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x85, 0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100000001, 0x0, 0xaf, 0x1ff, 0x8, 0x4, 0x100, 0xa51]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) signalfd4(r1, &(0x7f0000000580)={0x80000000}, 0x8, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@mcast2, 0x7fc, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x20) 12:24:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1fffffffe0000000, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(r0, 0xe000000200000000, 0x24, 0x0, 0x0) 12:24:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x4, 0x200, "83d3a31f68bfd2d6d507f037b2ef87a4063603acaf25ae3b", {0x40}, 0x76}) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00006ed000), &(0x7f0000000340)=0x4) 12:24:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x11156, 0x4, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 12:24:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', r4}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 12:24:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x1, 0x40) fchdir(r4) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000240)={0x0, 0xbbb8, 0x8001}) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1331045151d1a20f}, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000000)) r7 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000033000/0x2000)=nil) shmat(r7, &(0x7f0000046000/0x3000)=nil, 0x9000) r8 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100001, 0x10) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r10}}, 0x171) r11 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r11, 0xc040563e, &(0x7f0000000400)={0x0, 0x0, 0x102, 0x1, {0x1, 0x0, 0xffffffffffffffff, 0x3}}) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r10, 0x1e4280985aec5e13}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:24:06 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340)="ee79fd3d337c89645b2149f8bd863eb1dee866793a02a8cf4637c41a0409f384963cfd0a976b8ec16648186b9173021454224e37d7efc0fbe1d1fe0fa8b8d439c8f7455a3270c16ad46dcedb2ac0707f2ee6ac5953ef171a08744becff5fb7a20385f5bc4fa085b6e042aee1a1fb862691ccbc3743a87eae4a8d994fae680c7b8b9a2c2d4b1ec0eab79197bd4f3f8a33772a13e7d42aa4ed245882c8668bcf0f8339a40908afd678a4c18e37033cf33c66e7d9a32fd608d589280f247fdc50bcbc803f70d4defd48dca95666312ae5271b9e5ee71f27356715138aa283513697f57e19782bbcd685918f", &(0x7f0000000440)="a525c959cde84144a842bdf44274fefe84066c2d1be82d4de88e1e2b0ea66a53894f1481ddee8119797eb685ad6eb5b353c9c28cc11ff29edd008a94852301d48384fde4b2cfd041b230bd9e7d1ee3a28b8730b795b1a71042221a0835ea97d027855a1421ca3cf5eeb5d9f4316bab0317ba260b81a0b55912486d8265261659363f29d099fcb0cde8ffe2955c363abddcbcae0ff049a4fa5578403b03005328fce3d7e6fd325ffb6e19c2e641e5"}}, &(0x7f0000044000)) r1 = gettid() ioctl$KDSETMODE(r0, 0x4b3a, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x402080, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000f783c2f77012682e70d701d736149880de1b667b991e741f44b300000000000000", @ANYRES16=r6, @ANYBLOB="31000000000000000000090000003c0003000800030000000000140002006c6f000000000000000000000a00000014000600ff020000000000000000000000000001080001000100"], 0x3}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x16, r6, 0x300, 0x70bd2b, 0x25dfdbff}, 0x31d}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000050) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="000000000079e6a1ac5f22581600"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r2, 0x0) dup3(r7, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bind$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @bcast}, 0x1c) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r8, &(0x7f0000000440)=ANY=[@ANYRES64], 0x8) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) openat$ion(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ion\x00', 0x4000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000540)) fanotify_init(0x2, 0x800) tkill(r1, 0x1000000000016) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x4, 0x4490d2bf, 0xffffffff, 0x8, 0x0, 0x6, 0x1011, 0x8, 0x6, 0x7, 0x5, 0x88, 0x13, 0x1, 0xf35, 0xb98e, 0x4, 0xfffffffffffffffe, 0x4, 0x1, 0x4, 0x0, 0x7f, 0x7, 0x10001, 0x7ff, 0x7f, 0x3f, 0xfffffffffffffbef, 0x4, 0x2, 0xad, 0x9, 0x9, 0x4, 0x7, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x3}, 0x8511, 0x7, 0x3, 0xcdfbff86e2278d96, 0x0, 0x200, 0x10001}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xc) 12:24:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', r4}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 12:24:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(xtea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x0) r3 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000340)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x2c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000440)={r4, 0x10000}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0x1}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x28000000, 0x7, 0x2, 0x8, 0x6, 0x101, 0x5, 0x81, r4}, 0x20) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000081c0), 0x1, 0x4001) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2}, 0x0) sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="67922e12e8", 0x5}, {&(0x7f0000000140)="74ae93bf3195ff0447a425568289f55e6b475eafb433277f5e9132633785ced938665ec2854265e2b20f4dd3c4f48df4c65c85a2db05332a7bcdd18f01c9520766d1cf8ae084a7199df8e2335cc734452de76f7301e1a5a6ec1dc0f10946a16643432c88", 0x64}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000170100000200000000000000150000001800000000000000170100000400000007000000000000001800000000000000170100000300000000000000000000001800000000000000170100000300000001000000000000001800000000000000170100000300000000000001000000ed"], 0x78, 0x10}], 0x1, 0x80) [ 272.966374] rcu: INFO: rcu_preempt self-detected stall on CPU [ 272.972689] rcu: 1-...!: (1 GPs behind) idle=936/1/0x4000000000000004 softirq=12238/12240 fqs=32 [ 272.982078] rcu: (t=10501 jiffies g=7257 q=911) [ 272.986937] rcu: rcu_preempt kthread starved for 10438 jiffies! g7257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 272.997498] rcu: RCU grace-period kthread stack dump: [ 273.002681] rcu_preempt I29104 10 2 0x80000000 [ 273.008383] Call Trace: [ 273.011157] __schedule+0x866/0x1dc0 [ 273.015139] ? pci_mmcfg_check_reserved+0x170/0x170 [ 273.020153] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 273.025513] ? lockdep_hardirqs_on+0x415/0x5d0 [ 273.030129] ? trace_hardirqs_on+0x67/0x220 [ 273.034454] schedule+0x92/0x1c0 [ 273.037819] schedule_timeout+0x4db/0xfc0 [ 273.041974] ? usleep_range+0x170/0x170 [ 273.045950] ? trace_hardirqs_on+0x67/0x220 [ 273.050331] ? kasan_check_read+0x11/0x20 [ 273.054517] ? __next_timer_interrupt+0x1a0/0x1a0 [ 273.059382] ? prepare_to_swait_exclusive+0x120/0x120 [ 273.064598] rcu_gp_kthread+0xd5c/0x2190 [ 273.068682] ? rcu_blocking_is_gp+0x90/0x90 [ 273.073008] ? trace_hardirqs_on+0x67/0x220 [ 273.077328] ? kasan_check_read+0x11/0x20 [ 273.081478] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 273.086618] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 273.092196] ? __kthread_parkme+0xfb/0x1b0 [ 273.096451] kthread+0x354/0x420 [ 273.099820] ? rcu_blocking_is_gp+0x90/0x90 [ 273.104143] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 273.109680] ret_from_fork+0x24/0x30 [ 273.113480] NMI backtrace for cpu 1 [ 273.117136] CPU: 1 PID: 7793 Comm: syz-executor.1 Not tainted 4.19.72 #0 [ 273.124314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.133660] Call Trace: [ 273.136239] [ 273.138460] dump_stack+0x172/0x1f0 [ 273.142095] nmi_cpu_backtrace.cold+0x63/0xa4 [ 273.146635] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 273.151569] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 273.156853] arch_trigger_cpumask_backtrace+0x14/0x20 [ 273.162042] rcu_dump_cpu_stacks+0x189/0x1d5 [ 273.166570] ? wake_up_process+0x10/0x20 [ 273.170639] rcu_check_callbacks.cold+0x5e3/0xd90 [ 273.175573] ? trace_hardirqs_off+0x62/0x220 [ 273.180052] update_process_times+0x32/0x80 [ 273.184402] tick_sched_handle+0xa2/0x190 [ 273.188549] tick_sched_timer+0x47/0x130 [ 273.192613] __hrtimer_run_queues+0x33b/0xdc0 [ 273.197109] ? tick_sched_do_timer+0x1b0/0x1b0 [ 273.201692] ? hrtimer_fixup_activate+0x30/0x30 [ 273.206358] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 273.211721] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 273.217091] hrtimer_interrupt+0x314/0x770 [ 273.221478] smp_apic_timer_interrupt+0x111/0x550 [ 273.226450] apic_timer_interrupt+0xf/0x20 [ 273.230782] RIP: 0010:hhf_dequeue+0x58/0xa00 [ 273.235203] Code: 48 c1 e8 03 4c 01 e0 48 89 45 c0 49 8d 85 50 03 00 00 48 89 45 c8 48 c1 e8 03 48 89 45 b8 e8 0f de dc fb 48 8b 45 c0 80 38 00 <0f> 85 8d 07 00 00 48 8b 75 d0 49 8b 85 40 03 00 00 49 89 f6 48 39 [ 273.254112] RSP: 0018:ffff8880ae906f18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 273.261985] RAX: ffffed10103ed7c8 RBX: ffff888081f6bdb8 RCX: ffffffff858e7e8e [ 273.269432] RDX: 0000000000000100 RSI: ffffffff858e7881 RDI: ffff888081f6bdc0 [ 273.276706] RBP: ffff8880ae906f68 R08: ffff88809b254240 R09: 0000000000000009 [ 273.283984] R10: ffff88809b254c28 R11: 0000000028202827 R12: dffffc0000000000 [ 273.291253] R13: ffff888081f6bb00 R14: ffff888081f6be58 R15: ffff888081f6be50 [ 273.298545] ? apic_timer_interrupt+0xa/0x20 [ 273.302964] ? hhf_dequeue+0x65e/0xa00 [ 273.306848] ? hhf_dequeue+0x51/0xa00 [ 273.310661] ? hhf_dequeue+0x51/0xa00 [ 273.314590] __qdisc_run+0x1e7/0x1960 [ 273.318634] __dev_queue_xmit+0x165c/0x2fe0 [ 273.322966] ? netdev_pick_tx+0x300/0x300 [ 273.327120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 273.332722] ? br_nf_post_routing+0x780/0x12f0 [ 273.337328] ? br_forward_finish+0x235/0x400 [ 273.341741] ? find_held_lock+0x35/0x130 [ 273.345803] ? br_forward_finish+0x235/0x400 [ 273.350218] dev_queue_xmit+0x18/0x20 [ 273.354020] ? dev_queue_xmit+0x18/0x20 [ 273.357994] br_dev_queue_push_xmit+0x405/0x5d0 [ 273.362664] ? kasan_check_read+0x11/0x20 [ 273.366815] br_forward_finish+0xfa/0x400 [ 273.371147] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 273.376166] ? br_fdb_add.cold+0x8a/0x8a [ 273.380238] ? kasan_check_read+0x11/0x20 [ 273.384394] __br_forward+0x647/0xb30 [ 273.388198] ? br_forward_finish+0x400/0x400 [ 273.392632] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 273.397484] deliver_clone+0x61/0xc0 [ 273.401198] br_flood+0x4da/0x710 [ 273.404679] br_dev_xmit+0xeeb/0x1490 [ 273.408515] ? br_poll_controller+0x10/0x10 [ 273.412841] ? __lock_is_held+0xb6/0x140 [ 273.416914] dev_hard_start_xmit+0x1a5/0x980 [ 273.421404] ? check_preemption_disabled+0x48/0x290 [ 273.426666] __dev_queue_xmit+0x2704/0x2fe0 [ 273.430996] ? mark_held_locks+0x100/0x100 [ 273.435348] ? ip6t_do_table+0xd7b/0x1c90 [ 273.439519] ? netdev_pick_tx+0x300/0x300 [ 273.443717] ? ip6_finish_output+0x574/0xbe0 [ 273.448137] ? find_held_lock+0x35/0x130 [ 273.452203] ? ip6_finish_output+0x574/0xbe0 [ 273.456638] ? mark_held_locks+0xb1/0x100 [ 273.460802] ? ip6_finish_output2+0x1784/0x2550 [ 273.465488] ? ip6_finish_output+0x574/0xbe0 [ 273.469911] ? ip6_finish_output2+0x1784/0x2550 [ 273.474889] dev_queue_xmit+0x18/0x20 [ 273.478712] ? dev_queue_xmit+0x18/0x20 [ 273.482687] ip6_finish_output2+0x12fd/0x2550 [ 273.487190] ? ip6_forward_finish+0x4d0/0x4d0 [ 273.491698] ? lock_downgrade+0x810/0x810 [ 273.495848] ? kasan_check_read+0x11/0x20 [ 273.500008] ip6_finish_output+0x574/0xbe0 [ 273.504242] ? ip6_finish_output+0x574/0xbe0 [ 273.508654] ip6_output+0x235/0x7c0 [ 273.512372] ? ip6_finish_output+0xbe0/0xbe0 [ 273.517306] ? ip6_fragment+0x3770/0x3770 [ 273.521534] ndisc_send_skb+0xf3b/0x1460 [ 273.525602] ? nf_hook.constprop.0+0x560/0x560 [ 273.530215] ? memcpy+0x46/0x50 [ 273.533508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.539064] ndisc_send_rs+0x134/0x6d0 [ 273.542996] addrconf_rs_timer+0x30f/0x680 [ 273.547244] ? ipv6_get_lladdr+0x490/0x490 [ 273.551496] call_timer_fn+0x18d/0x720 [ 273.555394] ? ipv6_get_lladdr+0x490/0x490 [ 273.559633] ? process_timeout+0x40/0x40 [ 273.563695] ? run_timer_softirq+0x647/0x1700 [ 273.568368] ? trace_hardirqs_on+0x67/0x220 [ 273.572692] ? kasan_check_read+0x11/0x20 [ 273.576842] ? ipv6_get_lladdr+0x490/0x490 [ 273.581080] run_timer_softirq+0x652/0x1700 [ 273.585410] ? add_timer+0xbe0/0xbe0 [ 273.589133] ? __lock_is_held+0xb6/0x140 [ 273.593206] __do_softirq+0x25c/0x921 [ 273.597103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.602643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.609284] irq_exit+0x180/0x1d0 [ 273.612758] smp_apic_timer_interrupt+0x13b/0x550 [ 273.617605] apic_timer_interrupt+0xf/0x20 [ 273.622352] [ 273.624595] RIP: 0010:lock_acquire+0x1ea/0x3f0 [ 273.629181] Code: 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 c4 01 00 00 48 83 3d 0a b3 1f 07 00 0f 84 38 01 00 00 48 8b 7d c8 57 9d <0f> 1f 44 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 65 8b [ 273.649035] RSP: 0018:ffff888036567608 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 273.656751] RAX: 1ffffffff10e48c1 RBX: ffff88809b254240 RCX: 00000000114b6072 [ 273.664020] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 273.671287] RBP: ffff888036567650 R08: 0000000000000000 R09: 0000000000000001 [ 273.678726] R10: ffff88809b254ae8 R11: 0000000051c4d3c1 R12: ffffffff8879f320 [ 273.685994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 273.693348] lock_page_memcg+0x39/0x240 [ 273.697324] ? task_css.constprop.0+0x120/0x120 [ 273.702038] page_remove_rmap+0x53d/0x12c0 [ 273.706312] ? __tlb_remove_page_size+0x18c/0x500 [ 273.711159] unmap_page_range+0xd80/0x1e70 [ 273.715419] ? vm_normal_page_pmd+0x400/0x400 [ 273.719920] ? kasan_check_read+0x11/0x20 [ 273.724088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 273.730290] ? uprobe_munmap+0xad/0x2b0 [ 273.734268] unmap_single_vma+0x19d/0x300 [ 273.738418] unmap_vmas+0xae/0x180 [ 273.741977] exit_mmap+0x2c2/0x530 [ 273.745518] ? __ia32_sys_munmap+0x80/0x80 [ 273.749763] ? __khugepaged_exit+0x2da/0x400 [ 273.754170] ? rcu_read_lock_sched_held+0x110/0x130 [ 273.759212] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 273.765188] ? __khugepaged_exit+0xcf/0x400 [ 273.769513] mmput+0x15f/0x4c0 [ 273.772713] do_exit+0x899/0x2fa0 [ 273.776178] ? get_signal+0x384/0x1fc0 [ 273.780081] ? mm_update_next_owner+0x660/0x660 [ 273.784761] ? _raw_spin_unlock_irq+0x28/0x90 [ 273.789262] ? get_signal+0x384/0x1fc0 [ 273.793164] ? _raw_spin_unlock_irq+0x28/0x90 [ 273.797674] do_group_exit+0x135/0x370 [ 273.801564] get_signal+0x3ec/0x1fc0 [ 273.805284] ? __might_fault+0x12b/0x1e0 [ 273.809445] do_signal+0x95/0x1960 [ 273.812994] ? setup_sigcontext+0x7d0/0x7d0 [ 273.817495] ? kasan_check_read+0x11/0x20 [ 273.821678] ? _copy_to_user+0xc9/0x120 [ 273.825670] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 273.831236] ? __x64_sys_futex+0x40d/0x590 [ 273.835515] ? exit_to_usermode_loop+0x43/0x2c0 [ 273.840182] ? do_syscall_64+0x53d/0x620 [ 273.844243] ? exit_to_usermode_loop+0x43/0x2c0 [ 273.848910] ? lockdep_hardirqs_on+0x415/0x5d0 [ 273.853510] ? trace_hardirqs_on+0x67/0x220 [ 273.857833] exit_to_usermode_loop+0x244/0x2c0 [ 273.862418] do_syscall_64+0x53d/0x620 [ 273.866310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.871842] RIP: 0033:0x4598e9 [ 273.875051] Code: Bad RIP value. [ 273.878407] RSP: 002b:00007f3973823cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 273.886116] RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 00000000004598e9 [ 273.893380] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 [ 273.900646] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 273.908349] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 273.915614] R13: 00007ffde0f5c09f R14: 00007f39738249c0 R15: 000000000075bfd4