[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.728626][ T26] audit: type=1800 audit(1572974693.129:25): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.754047][ T26] audit: type=1800 audit(1572974693.129:26): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.799370][ T26] audit: type=1800 audit(1572974693.139:27): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2019/11/05 17:25:04 fuzzer started 2019/11/05 17:25:06 dialing manager at 10.128.0.26:40175 2019/11/05 17:25:06 syscalls: 2566 2019/11/05 17:25:06 code coverage: enabled 2019/11/05 17:25:06 comparison tracing: enabled 2019/11/05 17:25:06 extra coverage: enabled 2019/11/05 17:25:06 setuid sandbox: enabled 2019/11/05 17:25:06 namespace sandbox: enabled 2019/11/05 17:25:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/05 17:25:06 fault injection: enabled 2019/11/05 17:25:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/05 17:25:06 net packet injection: enabled 2019/11/05 17:25:06 net device setup: enabled 2019/11/05 17:25:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/05 17:25:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 17:27:06 executing program 0: 17:27:06 executing program 1: syzkaller login: [ 191.991418][ T8917] IPVS: ftp: loaded support on port[0] = 21 [ 192.117405][ T8919] IPVS: ftp: loaded support on port[0] = 21 [ 192.205184][ T8917] chnl_net:caif_netlink_parms(): no params data found 17:27:06 executing program 2: [ 192.258398][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.267083][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.275427][ T8917] device bridge_slave_0 entered promiscuous mode [ 192.292551][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.300095][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.309474][ T8917] device bridge_slave_1 entered promiscuous mode [ 192.396308][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.430731][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.442725][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 192.479464][ T8917] team0: Port device team_slave_0 added [ 192.497626][ T8923] IPVS: ftp: loaded support on port[0] = 21 [ 192.512213][ T8917] team0: Port device team_slave_1 added [ 192.531055][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.539415][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.550094][ T8919] device bridge_slave_0 entered promiscuous mode [ 192.558623][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.568055][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.576586][ T8919] device bridge_slave_1 entered promiscuous mode 17:27:07 executing program 3: [ 192.623345][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.677939][ T8917] device hsr_slave_0 entered promiscuous mode [ 192.744204][ T8917] device hsr_slave_1 entered promiscuous mode [ 192.820909][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.851636][ T8925] IPVS: ftp: loaded support on port[0] = 21 [ 192.895794][ T8919] team0: Port device team_slave_0 added [ 192.921964][ T8919] team0: Port device team_slave_1 added 17:27:07 executing program 4: [ 193.071959][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 193.136062][ T8919] device hsr_slave_0 entered promiscuous mode 17:27:07 executing program 5: [ 193.184274][ T8919] device hsr_slave_1 entered promiscuous mode [ 193.234602][ T8919] debugfs: Directory 'hsr0' with parent '/' already present! [ 193.287588][ T8928] IPVS: ftp: loaded support on port[0] = 21 [ 193.379070][ T8931] IPVS: ftp: loaded support on port[0] = 21 [ 193.428999][ T8925] chnl_net:caif_netlink_parms(): no params data found [ 193.450068][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.457809][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.465630][ T8923] device bridge_slave_0 entered promiscuous mode [ 193.492249][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.500690][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.509183][ T8923] device bridge_slave_1 entered promiscuous mode [ 193.557157][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.575961][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.583423][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.591187][ T8925] device bridge_slave_0 entered promiscuous mode [ 193.599149][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.606285][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.614032][ T8925] device bridge_slave_1 entered promiscuous mode [ 193.622235][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.681179][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.696034][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.722997][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 193.742648][ T8923] team0: Port device team_slave_0 added [ 193.759991][ T8925] team0: Port device team_slave_0 added [ 193.769781][ T8923] team0: Port device team_slave_1 added [ 193.812440][ T8925] team0: Port device team_slave_1 added [ 193.897421][ T8923] device hsr_slave_0 entered promiscuous mode [ 193.936310][ T8923] device hsr_slave_1 entered promiscuous mode [ 193.975584][ T8923] debugfs: Directory 'hsr0' with parent '/' already present! [ 193.990840][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 194.065773][ T8917] netdevsim: probe of netdevsim0 failed with error -17 [ 194.073042][ T8925] device hsr_slave_0 entered promiscuous mode [ 194.104192][ T8925] device hsr_slave_1 entered promiscuous mode [ 194.143914][ T8925] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.151620][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.159104][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.167340][ T8928] device bridge_slave_0 entered promiscuous mode [ 194.175518][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.182585][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.190569][ T8928] device bridge_slave_1 entered promiscuous mode [ 194.239637][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.262130][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.292676][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.300040][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.311009][ T8931] device bridge_slave_0 entered promiscuous mode [ 194.318930][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.326238][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.334412][ T8931] device bridge_slave_1 entered promiscuous mode [ 194.387849][ T8928] team0: Port device team_slave_0 added [ 194.396519][ T8928] team0: Port device team_slave_1 added [ 194.410249][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.437236][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.485821][ T8928] device hsr_slave_0 entered promiscuous mode [ 194.536010][ T8928] device hsr_slave_1 entered promiscuous mode [ 194.575586][ T8928] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.601997][ T8931] team0: Port device team_slave_0 added [ 194.629721][ T8931] team0: Port device team_slave_1 added [ 194.696337][ T8931] device hsr_slave_0 entered promiscuous mode [ 194.724489][ T8931] device hsr_slave_1 entered promiscuous mode [ 194.773867][ T8931] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.840263][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.845374][ T8919] netdevsim: probe of netdevsim1 failed with error -17 [ 194.860890][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.870096][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.883307][ T8917] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.899451][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.908160][ T8937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.917367][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.924733][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.984753][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.994509][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.002968][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.013433][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.020573][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.029198][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.038400][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.047070][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.055900][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.064857][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.085747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.094747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.109886][ T8917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.122081][ T8917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.139722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.148210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.159070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.168335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.177036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.213210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.222115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.243524][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.261271][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.282510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.291687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.319199][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.330330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.339766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.348892][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.356004][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.382498][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.390770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.401997][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.412867][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.419974][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.428245][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.437790][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.446460][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.455778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.464328][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.472759][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.474688][ T8925] netdevsim: probe of netdevsim3 failed with error -17 [ 195.487323][ T8919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.500985][ T8919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.519912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.529219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.536240][ T8923] netdevsim: probe of netdevsim2 failed with error -17 [ 195.556510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.571359][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 17:27:10 executing program 0: tkill(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 195.580319][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.603369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:27:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) dup3(r1, r0, 0x0) [ 195.642249][ T8949] BPF:hdr_len not found 17:27:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x0, 0xffffffff}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = getpgid(0x0) sched_setaffinity(r2, 0x0, 0x0) lstat(0x0, 0x0) getpid() listen(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getpgid(0x0) fstat(0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getresgid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getresgid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) syz_open_dev$cec(&(0x7f0000000840)='/dev/cec#\x00', 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000f40)) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba", 0xdd, 0xfffffffffffffffe) lstat(0x0, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r5) lstat(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, r6, 0x0, r7) sched_setaffinity(0x0, 0x31f, &(0x7f0000000500)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) keyctl$chown(0x4, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0xffffffffffffffe3, 0x20000004, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r9, 0x80) inotify_init1(0x80000) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{0x0}], 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffe3, 0x0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000001040)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x80) getpgid(0x0) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r12) add_key$user(&(0x7f00000002c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r13, 0x5441, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001080)='/dev/dlm_plock\x00', 0x0, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x20000004, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getpid() r15 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r15, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000001780)={{{@in, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000018c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) fsopen(&(0x7f0000001b00)='mqueue\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) listen(0xffffffffffffffff, 0x80) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000003040)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010", 0x49}], 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003880)='/dev/video36\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)}], 0x1) lstat(&(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpgrp(0x0) lstat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000003f00)) keyctl$chown(0x4, 0x0, 0x0, 0x0) lstat(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r17 = syz_open_pts(r1, 0x4000000000000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r17, r0, 0x0, 0x6f0a77bd) [ 195.702048][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.711593][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.748520][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.880700][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.901111][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.921349][ C0] hrtimer: interrupt took 42796 ns [ 195.949765][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.979814][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.997411][ T8928] netdevsim: probe of netdevsim4 failed with error -17 [ 196.014102][ T8925] 8021q: adding VLAN 0 to HW filter on device team0 17:27:10 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x60000, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x7530}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 196.051933][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.072786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.112885][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.120233][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.147256][ T8931] netdevsim: probe of netdevsim5 failed with error -17 [ 196.160871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.169234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.179852][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.202369][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.211676][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.244979][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.259115][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.269932][ T8938] bridge0: port 2(bridge_slave_1) entered forwarding state 17:27:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f00000000c0)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x00\x00\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd@\x00\n') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891a, &(0x7f0000000580)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x05\x06\x00\x05\x00\x00\x00\x00\x00D3A}\xe4\xac\xff\x82q\xc7J\xe2J\x06\x00\x00\x00\x00\xd9\xbc\x0e\x9a\xd5\t\f\xe2\x90G903\xd7\x8d\xa8\x9e@?\xe5\xb1\rQ-\v\xcb\xbf\xd6=\bWN\x824\x06\xe9fL\x9b>\xdd\a\xba8\x1a{\x93\xbb\x02*5F\x8d*\xbb\xd9|\x03\x86&Ds\xd1`=\x04\'\xf7\xd7\xb3\xae3\x81\xdd\xf57\xd9Y=\xb6/\xe2g\xc7\xcd\x1d\xb3T9\xda\xc3\x80\xd4\x13\x9f\xbf\xc0\x82\xe2\xc7\xc8\x18w\xc163B\xdcW\xff\xaf\x00\x00\x00\x00J\x00*\x14\b\xeb\xc4\x8d\xb7\x81h/\x9d\xcf\x8cJ\xec\b\xdd&\xc7`\x86\xe5\xaf\xdeC\xcd\x9e\x01\xd4\x9b\x9b)\xf9=\xed\x15!+\xc4>V\x19!V\xaajPP\x00\xfa$Q\x82\x007Qu.\x9bm\xf9\x8ctEI\x94\xbf\xd9\xe4l\x1a&\x1ae\x02p\xd6J\xe5},V\xe9]\x96\xbc\r\x8a\xa5G\x84*\xdd\x14\xdc\xef\xc9\xber\xac;\xd2]\xd8\x9f\x96\xc5\x00\x00~\xb4\xd8LS\x8e\x84\x88\a\x92\xe1\xac\xf7\xd5\xe8\x84h\xf4v\x86\xe7+\xba\xe3F\x02 gEo\xf5M\x1c\xc9\xb3@\xd0}S\v\"G\xf8\x9f\x82(iuW{+\xef\x9cD\x9d9\xf6\xdf/.\xcep;\x04 \xe3r\x91\xbc\x17)\x1f') [ 196.318105][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.444089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.452758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.469597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.478641][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.485770][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.501431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.510421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.525873][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.532946][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.540692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.549620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.558247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.567398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.579934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.592003][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.600645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.609337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.617884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.627180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.636023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.644850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.654032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.661840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.670087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 17:27:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x7ff}, 0x1f8) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 196.826436][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.835829][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.854929][ T8925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.878606][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.888588][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.899315][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.907851][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.931951][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.943713][ T8923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.955990][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.965818][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.975487][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.998428][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 17:27:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9002, 0xe000, 0x0, &(0x7f0000ff2000/0xe000)=nil) [ 197.123692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.132978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.140894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.150430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.159376][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.166513][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.174463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.183017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.191821][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.198902][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.212916][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.246469][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.268230][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 17:27:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xffffffffffffff26, 0x403}], 0x4801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='{', 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 197.295522][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.312855][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.339892][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.381988][ T8938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.401247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.412376][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.430241][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.450460][ T8928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.472390][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.489460][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.506314][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.533306][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.547953][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.558659][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.572126][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.582001][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.590475][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.593632][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.635462][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.676184][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.694930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.703716][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.710835][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.774522][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.788223][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.800798][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.828103][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.844016][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.852712][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.873083][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.880203][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.888668][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.904424][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.912926][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.940092][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.950733][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 17:27:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0xe5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0xb32, 0x0) 17:27:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_!cl_access\x00', 0x0, 0x0, 0x0) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 197.992882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.010959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.030220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.046354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.068543][ T8931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.100503][ T8931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.133438][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.152889][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.189804][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.204610][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.215781][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 17:27:12 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='./file0\x00') tkill(r0, 0x1000000000016) 17:27:13 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c8", 0x93, 0x8}], 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 17:27:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, &(0x7f00000000c0)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x00\x00\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd@\x00\n') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891a, &(0x7f0000000580)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00\x05\x06\x00\x05\x00\x00\x00\x00\x00D3A}\xe4\xac\xff\x82q\xc7J\xe2J\x06\x00\x00\x00\x00\xd9\xbc\x0e\x9a\xd5\t\f\xe2\x90G903\xd7\x8d\xa8\x9e@?\xe5\xb1\rQ-\v\xcb\xbf\xd6=\bWN\x824\x06\xe9fL\x9b>\xdd\a\xba8\x1a{\x93\xbb\x02*5F\x8d*\xbb\xd9|\x03\x86&Ds\xd1`=\x04\'\xf7\xd7\xb3\xae3\x81\xdd\xf57\xd9Y=\xb6/\xe2g\xc7\xcd\x1d\xb3T9\xda\xc3\x80\xd4\x13\x9f\xbf\xc0\x82\xe2\xc7\xc8\x18w\xc163B\xdcW\xff\xaf\x00\x00\x00\x00J\x00*\x14\b\xeb\xc4\x8d\xb7\x81h/\x9d\xcf\x8cJ\xec\b\xdd&\xc7`\x86\xe5\xaf\xdeC\xcd\x9e\x01\xd4\x9b\x9b)\xf9=\xed\x15!+\xc4>V\x19!V\xaajPP\x00\xfa$Q\x82\x007Qu.\x9bm\xf9\x8ctEI\x94\xbf\xd9\xe4l\x1a&\x1ae\x02p\xd6J\xe5},V\xe9]\x96\xbc\r\x8a\xa5G\x84*\xdd\x14\xdc\xef\xc9\xber\xac;\xd2]\xd8\x9f\x96\xc5\x00\x00~\xb4\xd8LS\x8e\x84\x88\a\x92\xe1\xac\xf7\xd5\xe8\x84h\xf4v\x86\xe7+\xba\xe3F\x02 gEo\xf5M\x1c\xc9\xb3@\xd0}S\v\"G\xf8\x9f\x82(iuW{+\xef\x9cD\x9d9\xf6\xdf/.\xcep;\x04 \xe3r\x91\xbc\x17)\x1f') 17:27:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 17:27:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d800000019008100e00f80ecda4cb9040a1d65ef0b007c06e87c55a1bc0009000c000699030007000500154006008178a80016000c000100e558f000000001000000006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe199d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9451bc2b711849b561f215ce3bb53b409d5e1cace816d0b7fece0b42a9ecbee5de6ccd40dd6e4edef3daa452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 17:27:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) write$cgroup_int(r0, &(0x7f0000000040)=0x6, 0x12) socket$kcm(0x10, 0x1, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4c, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x5}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3, 0x1}, 0x51) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r3, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r4, &(0x7f0000000940)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/10, 0xa}, {&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/207, 0xcf}], 0x5, &(0x7f0000000840)=""/247, 0xf7}, 0x20000001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4f9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() 17:27:13 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a", 0x23}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffa) [ 198.655197][ T9050] kasan: CONFIG_KASAN_INLINE enabled [ 198.660822][ T9050] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 198.672808][ T9050] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 198.679772][ T9050] CPU: 1 PID: 9050 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191105 #0 [ 198.688915][ T9050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.698993][ T9050] RIP: 0010:pagemap_pmd_range+0x83/0x1e40 [ 198.704822][ T9050] Code: c1 ea 03 80 3c 02 00 0f 85 ef 1a 00 00 48 8b 43 18 49 8d 7f 40 48 89 fa 48 c1 ea 03 48 89 45 c8 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 be 1a 00 00 49 8b 5f 40 be 08 00 00 00 4c 8d ab [ 198.724780][ T9050] RSP: 0018:ffff88805e09f288 EFLAGS: 00010202 [ 198.730850][ T9050] RAX: dffffc0000000000 RBX: ffff88805e09f438 RCX: ffffc9000c5ac000 [ 198.738911][ T9050] RDX: 0000000000000008 RSI: ffffffff81dd1b94 RDI: 0000000000000040 [ 198.746976][ T9050] RBP: ffff88805e09f300 R08: ffff88809a94e1c0 R09: ffffed101492972a [ 198.754951][ T9050] R10: ffffed1014929729 R11: ffff8880a494b94b R12: ffff8880a4488010 [ 198.763101][ T9050] R13: 0000000000600000 R14: 00000000005fffff R15: 0000000000000000 [ 198.771074][ T9050] FS: 00007fb5d0692700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 198.780005][ T9050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.786587][ T9050] CR2: 0000000000000000 CR3: 00000000a8dcb000 CR4: 00000000001406e0 [ 198.794558][ T9050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.802548][ T9050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.810565][ T9050] Call Trace: [ 198.813864][ T9050] ? smaps_pte_range+0x1460/0x1460 [ 198.818966][ T9050] __walk_page_range+0x10ff/0x1b40 [ 198.824078][ T9050] walk_page_range+0x1c5/0x3b0 [ 198.828862][ T9050] ? __walk_page_range+0x1b40/0x1b40 [ 198.834165][ T9050] ? security_capable+0x95/0xc0 [ 198.839011][ T9050] pagemap_read+0x4d1/0x650 [ 198.843498][ T9050] ? smaps_rollup_open+0x160/0x160 [ 198.848626][ T9050] do_iter_read+0x4a4/0x660 [ 198.853122][ T9050] ? dup_iter+0x260/0x260 [ 198.857618][ T9050] vfs_readv+0xf0/0x160 [ 198.861754][ T9050] ? alloc_pages_current+0x10f/0x210 [ 198.867028][ T9050] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 [ 198.873088][ T9050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.879310][ T9050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 198.885566][ T9050] ? iov_iter_get_pages_alloc+0x3ae/0x12f0 [ 198.891383][ T9050] ? memcpy_mcsafe_to_page+0x150/0x150 [ 198.897274][ T9050] ? aa_file_perm+0x40b/0xdd0 [ 198.901964][ T9050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 198.907683][ T9050] ? iov_iter_pipe+0xba/0x2f0 [ 198.912344][ T9050] default_file_splice_read+0x482/0x8a0 [ 198.917886][ T9050] ? rcu_read_lock_held+0x9c/0xb0 [ 198.922907][ T9050] ? iter_file_splice_write+0xbe0/0xbe0 [ 198.928444][ T9050] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 198.934412][ T9050] ? aa_path_link+0x340/0x340 [ 198.939079][ T9050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.945336][ T9050] ? security_file_permission+0x8f/0x380 [ 198.951070][ T9050] ? __mutex_init+0xef/0x130 [ 198.955754][ T9050] ? iter_file_splice_write+0xbe0/0xbe0 [ 198.961292][ T9050] do_splice_to+0x127/0x180 [ 198.965796][ T9050] splice_direct_to_actor+0x2d3/0x970 [ 198.971148][ T9050] ? generic_pipe_buf_nosteal+0x10/0x10 [ 198.976685][ T9050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.982907][ T9050] ? do_splice_to+0x180/0x180 [ 198.987568][ T9050] ? rw_verify_area+0x126/0x360 [ 198.992487][ T9050] do_splice_direct+0x1da/0x2a0 [ 198.997430][ T9050] ? splice_direct_to_actor+0x970/0x970 [ 199.002986][ T9050] ? rw_verify_area+0x126/0x360 [ 199.007820][ T9050] do_sendfile+0x597/0xd00 [ 199.012310][ T9050] ? do_compat_pwritev64+0x1c0/0x1c0 [ 199.017576][ T9050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.023806][ T9050] ? put_timespec64+0xda/0x140 [ 199.028566][ T9050] __x64_sys_sendfile64+0x1dd/0x220 [ 199.033759][ T9050] ? __ia32_sys_sendfile+0x230/0x230 [ 199.039127][ T9050] ? do_syscall_64+0x26/0x760 [ 199.043792][ T9050] ? lockdep_hardirqs_on+0x421/0x5e0 [ 199.049428][ T9050] ? trace_hardirqs_on+0x67/0x240 [ 199.054443][ T9050] do_syscall_64+0xfa/0x760 [ 199.058945][ T9050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.064824][ T9050] RIP: 0033:0x45a219 [ 199.068728][ T9050] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.088312][ T9050] RSP: 002b:00007fb5d0691c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 199.096714][ T9050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 199.104688][ T9050] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 199.112657][ T9050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 199.120620][ T9050] R10: 000000000000edc0 R11: 0000000000000246 R12: 00007fb5d06926d4 [ 199.128578][ T9050] R13: 00000000004c7f94 R14: 00000000004de3b0 R15: 00000000ffffffff [ 199.136532][ T9050] Modules linked in: [ 199.150058][ T9049] kobject: 'loop1' (00000000286d8bed): kobject_uevent_env [ 199.150062][ T9050] ---[ end trace 0f201ada3fa8ef85 ]--- [ 199.150089][ T9050] RIP: 0010:pagemap_pmd_range+0x83/0x1e40 [ 199.169101][ T9050] Code: c1 ea 03 80 3c 02 00 0f 85 ef 1a 00 00 48 8b 43 18 49 8d 7f 40 48 89 fa 48 c1 ea 03 48 89 45 c8 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 0f 85 be 1a 00 00 49 8b 5f 40 be 08 00 00 00 4c 8d ab [ 199.170313][ T9049] kobject: 'loop1' (00000000286d8bed): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.189265][ T9050] RSP: 0018:ffff88805e09f288 EFLAGS: 00010202 17:27:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f0000000040)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_!cl_access\x00', 0x0, 0x0, 0x0) close(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 199.207375][ T9050] RAX: dffffc0000000000 RBX: ffff88805e09f438 RCX: ffffc9000c5ac000 [ 199.216082][ T9050] RDX: 0000000000000008 RSI: ffffffff81dd1b94 RDI: 0000000000000040 [ 199.224180][ T9050] RBP: ffff88805e09f300 R08: ffff88809a94e1c0 R09: ffffed101492972a [ 199.233562][ T3998] kobject: 'loop5' (00000000e3ef1e3d): kobject_uevent_env [ 199.245644][ T9050] R10: ffffed1014929729 R11: ffff8880a494b94b R12: ffff8880a4488010 [ 199.258072][ T9057] kobject: 'nr0' (00000000bc236411): kobject_add_internal: parent: 'net', set: 'devices' [ 199.260706][ T3998] kobject: 'loop5' (00000000e3ef1e3d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 199.272816][ T9057] kobject: 'nr0' (00000000bc236411): kobject_uevent_env [ 199.292378][ T9050] R13: 0000000000600000 R14: 00000000005fffff R15: 0000000000000000 [ 199.297478][ T9053] kobject: 'loop1' (00000000286d8bed): kobject_uevent_env [ 199.307872][ T9050] FS: 00007fb5d0692700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 199.307881][ T9050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.307889][ T9050] CR2: 0000000000000000 CR3: 00000000a8dcb000 CR4: 00000000001406e0 [ 199.307899][ T9050] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.307907][ T9050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.307915][ T9050] Kernel panic - not syncing: Fatal exception [ 199.309392][ T9050] Kernel Offset: disabled [ 199.359280][ T9050] Rebooting in 86400 seconds..