[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.18' (ECDSA) to the list of known hosts. 2021/02/03 15:44:05 fuzzer started 2021/02/03 15:44:05 dialing manager at 10.128.0.169:46241 2021/02/03 15:44:05 syscalls: 3466 2021/02/03 15:44:05 code coverage: enabled 2021/02/03 15:44:05 comparison tracing: enabled 2021/02/03 15:44:05 extra coverage: enabled 2021/02/03 15:44:05 setuid sandbox: enabled 2021/02/03 15:44:05 namespace sandbox: enabled 2021/02/03 15:44:05 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/03 15:44:05 fault injection: enabled 2021/02/03 15:44:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/03 15:44:05 net packet injection: enabled 2021/02/03 15:44:05 net device setup: enabled 2021/02/03 15:44:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/02/03 15:44:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/03 15:44:05 USB emulation: enabled 2021/02/03 15:44:05 hci packet injection: enabled 2021/02/03 15:44:05 wifi device emulation: enabled 2021/02/03 15:44:05 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/03 15:44:06 fetching corpus: 50, signal 54365/57895 (executing program) 2021/02/03 15:44:06 fetching corpus: 100, signal 77195/82204 (executing program) 2021/02/03 15:44:06 fetching corpus: 150, signal 97258/103638 (executing program) 2021/02/03 15:44:06 fetching corpus: 200, signal 110677/118343 (executing program) 2021/02/03 15:44:06 fetching corpus: 250, signal 119547/128490 (executing program) 2021/02/03 15:44:06 fetching corpus: 300, signal 128530/138716 (executing program) 2021/02/03 15:44:07 fetching corpus: 350, signal 142587/153768 (executing program) 2021/02/03 15:44:07 fetching corpus: 400, signal 153084/165265 (executing program) 2021/02/03 15:44:07 fetching corpus: 450, signal 163800/176881 (executing program) 2021/02/03 15:44:07 fetching corpus: 500, signal 169436/183565 (executing program) 2021/02/03 15:44:07 fetching corpus: 550, signal 178445/193461 (executing program) 2021/02/03 15:44:07 fetching corpus: 600, signal 182865/198936 (executing program) 2021/02/03 15:44:07 fetching corpus: 650, signal 188031/205043 (executing program) 2021/02/03 15:44:08 fetching corpus: 700, signal 192206/210161 (executing program) 2021/02/03 15:44:08 fetching corpus: 750, signal 196508/215407 (executing program) 2021/02/03 15:44:08 fetching corpus: 800, signal 201948/221669 (executing program) 2021/02/03 15:44:08 fetching corpus: 850, signal 208266/228644 (executing program) 2021/02/03 15:44:08 fetching corpus: 900, signal 212314/233502 (executing program) 2021/02/03 15:44:09 fetching corpus: 950, signal 217094/239017 (executing program) 2021/02/03 15:44:09 fetching corpus: 1000, signal 222039/244610 (executing program) 2021/02/03 15:44:09 fetching corpus: 1050, signal 226999/250239 (executing program) 2021/02/03 15:44:09 fetching corpus: 1100, signal 231360/255242 (executing program) 2021/02/03 15:44:09 fetching corpus: 1150, signal 234685/259313 (executing program) 2021/02/03 15:44:09 fetching corpus: 1200, signal 238594/263834 (executing program) 2021/02/03 15:44:10 fetching corpus: 1250, signal 241153/267125 (executing program) 2021/02/03 15:44:10 fetching corpus: 1299, signal 246278/272633 (executing program) 2021/02/03 15:44:10 fetching corpus: 1349, signal 249737/276675 (executing program) 2021/02/03 15:44:10 fetching corpus: 1399, signal 252316/279922 (executing program) 2021/02/03 15:44:10 fetching corpus: 1449, signal 256567/284572 (executing program) 2021/02/03 15:44:10 fetching corpus: 1499, signal 259682/288252 (executing program) 2021/02/03 15:44:10 fetching corpus: 1549, signal 263639/292578 (executing program) 2021/02/03 15:44:11 fetching corpus: 1599, signal 265833/295339 (executing program) 2021/02/03 15:44:11 fetching corpus: 1649, signal 269326/299240 (executing program) 2021/02/03 15:44:11 fetching corpus: 1699, signal 272507/302865 (executing program) 2021/02/03 15:44:11 fetching corpus: 1749, signal 277037/307603 (executing program) 2021/02/03 15:44:11 fetching corpus: 1799, signal 280544/311416 (executing program) 2021/02/03 15:44:11 fetching corpus: 1849, signal 285974/316827 (executing program) 2021/02/03 15:44:12 fetching corpus: 1899, signal 288341/319629 (executing program) 2021/02/03 15:44:12 fetching corpus: 1949, signal 291117/322797 (executing program) 2021/02/03 15:44:12 fetching corpus: 1999, signal 294236/326175 (executing program) 2021/02/03 15:44:12 fetching corpus: 2049, signal 295909/328373 (executing program) 2021/02/03 15:44:12 fetching corpus: 2099, signal 297719/330644 (executing program) 2021/02/03 15:44:12 fetching corpus: 2149, signal 299992/333296 (executing program) 2021/02/03 15:44:12 fetching corpus: 2199, signal 303765/337152 (executing program) 2021/02/03 15:44:13 fetching corpus: 2249, signal 306529/340107 (executing program) 2021/02/03 15:44:13 fetching corpus: 2299, signal 308728/342599 (executing program) 2021/02/03 15:44:13 fetching corpus: 2349, signal 311570/345596 (executing program) 2021/02/03 15:44:13 fetching corpus: 2399, signal 313752/348043 (executing program) 2021/02/03 15:44:13 fetching corpus: 2449, signal 315659/350243 (executing program) 2021/02/03 15:44:13 fetching corpus: 2499, signal 319290/353787 (executing program) 2021/02/03 15:44:14 fetching corpus: 2549, signal 321484/356150 (executing program) 2021/02/03 15:44:14 fetching corpus: 2599, signal 323790/358592 (executing program) 2021/02/03 15:44:14 fetching corpus: 2649, signal 326164/361151 (executing program) 2021/02/03 15:44:14 fetching corpus: 2699, signal 328418/363524 (executing program) 2021/02/03 15:44:14 fetching corpus: 2749, signal 330596/365848 (executing program) 2021/02/03 15:44:14 fetching corpus: 2799, signal 332678/368091 (executing program) 2021/02/03 15:44:15 fetching corpus: 2849, signal 334427/370007 (executing program) 2021/02/03 15:44:15 fetching corpus: 2899, signal 336491/372248 (executing program) 2021/02/03 15:44:15 fetching corpus: 2949, signal 338612/374427 (executing program) 2021/02/03 15:44:15 fetching corpus: 2999, signal 340819/376616 (executing program) 2021/02/03 15:44:15 fetching corpus: 3048, signal 342163/378225 (executing program) 2021/02/03 15:44:15 fetching corpus: 3098, signal 344041/380182 (executing program) 2021/02/03 15:44:15 fetching corpus: 3148, signal 345783/381987 (executing program) 2021/02/03 15:44:16 fetching corpus: 3198, signal 347502/383816 (executing program) 2021/02/03 15:44:16 fetching corpus: 3248, signal 349618/385932 (executing program) 2021/02/03 15:44:16 fetching corpus: 3298, signal 351477/387857 (executing program) 2021/02/03 15:44:16 fetching corpus: 3348, signal 353023/389546 (executing program) 2021/02/03 15:44:16 fetching corpus: 3398, signal 354602/391183 (executing program) 2021/02/03 15:44:16 fetching corpus: 3448, signal 355829/392611 (executing program) 2021/02/03 15:44:16 fetching corpus: 3498, signal 357304/394193 (executing program) 2021/02/03 15:44:17 fetching corpus: 3548, signal 359550/396299 (executing program) 2021/02/03 15:44:17 fetching corpus: 3597, signal 361224/398011 (executing program) 2021/02/03 15:44:17 fetching corpus: 3647, signal 362837/399619 (executing program) 2021/02/03 15:44:17 fetching corpus: 3697, signal 364666/401373 (executing program) 2021/02/03 15:44:17 fetching corpus: 3747, signal 366428/403118 (executing program) 2021/02/03 15:44:17 fetching corpus: 3797, signal 367945/404631 (executing program) 2021/02/03 15:44:17 fetching corpus: 3847, signal 369222/405892 (executing program) 2021/02/03 15:44:18 fetching corpus: 3897, signal 371420/407793 (executing program) 2021/02/03 15:44:18 fetching corpus: 3947, signal 372811/409186 (executing program) 2021/02/03 15:44:18 fetching corpus: 3997, signal 374165/410534 (executing program) 2021/02/03 15:44:18 fetching corpus: 4047, signal 375821/412064 (executing program) 2021/02/03 15:44:18 fetching corpus: 4097, signal 376918/413215 (executing program) 2021/02/03 15:44:18 fetching corpus: 4147, signal 378857/414908 (executing program) 2021/02/03 15:44:19 fetching corpus: 4197, signal 380915/416648 (executing program) 2021/02/03 15:44:19 fetching corpus: 4247, signal 382386/418035 (executing program) 2021/02/03 15:44:19 fetching corpus: 4297, signal 383611/419256 (executing program) 2021/02/03 15:44:19 fetching corpus: 4347, signal 384699/420363 (executing program) 2021/02/03 15:44:19 fetching corpus: 4397, signal 386212/421702 (executing program) 2021/02/03 15:44:19 fetching corpus: 4447, signal 387400/422848 (executing program) 2021/02/03 15:44:20 fetching corpus: 4496, signal 388603/423983 (executing program) 2021/02/03 15:44:20 fetching corpus: 4546, signal 389705/425048 (executing program) 2021/02/03 15:44:20 fetching corpus: 4596, signal 391223/426398 (executing program) 2021/02/03 15:44:20 fetching corpus: 4646, signal 392473/427562 (executing program) 2021/02/03 15:44:20 fetching corpus: 4696, signal 393305/428469 (executing program) 2021/02/03 15:44:20 fetching corpus: 4746, signal 394617/429654 (executing program) 2021/02/03 15:44:20 fetching corpus: 4796, signal 396592/431172 (executing program) 2021/02/03 15:44:21 fetching corpus: 4846, signal 397464/432078 (executing program) 2021/02/03 15:44:21 fetching corpus: 4896, signal 399203/433475 (executing program) 2021/02/03 15:44:21 fetching corpus: 4946, signal 400310/434459 (executing program) 2021/02/03 15:44:21 fetching corpus: 4996, signal 402625/436147 (executing program) 2021/02/03 15:44:22 fetching corpus: 5045, signal 403212/436802 (executing program) 2021/02/03 15:44:22 fetching corpus: 5095, signal 404985/438156 (executing program) 2021/02/03 15:44:22 fetching corpus: 5145, signal 406173/439134 (executing program) 2021/02/03 15:44:22 fetching corpus: 5195, signal 408068/440527 (executing program) 2021/02/03 15:44:22 fetching corpus: 5245, signal 409094/441408 (executing program) 2021/02/03 15:44:22 fetching corpus: 5295, signal 410301/442400 (executing program) 2021/02/03 15:44:23 fetching corpus: 5345, signal 411685/443487 (executing program) 2021/02/03 15:44:23 fetching corpus: 5395, signal 412624/444278 (executing program) 2021/02/03 15:44:23 fetching corpus: 5445, signal 414338/445539 (executing program) 2021/02/03 15:44:23 fetching corpus: 5494, signal 415353/446339 (executing program) 2021/02/03 15:44:23 fetching corpus: 5544, signal 416506/447237 (executing program) 2021/02/03 15:44:23 fetching corpus: 5594, signal 417748/448208 (executing program) 2021/02/03 15:44:23 fetching corpus: 5644, signal 419226/449240 (executing program) 2021/02/03 15:44:24 fetching corpus: 5694, signal 420832/450385 (executing program) 2021/02/03 15:44:24 fetching corpus: 5744, signal 422218/451375 (executing program) 2021/02/03 15:44:24 fetching corpus: 5794, signal 423410/452253 (executing program) 2021/02/03 15:44:24 fetching corpus: 5844, signal 424995/453317 (executing program) 2021/02/03 15:44:24 fetching corpus: 5894, signal 426415/454309 (executing program) 2021/02/03 15:44:24 fetching corpus: 5944, signal 427778/455254 (executing program) 2021/02/03 15:44:25 fetching corpus: 5994, signal 429107/456138 (executing program) 2021/02/03 15:44:25 fetching corpus: 6042, signal 430239/456935 (executing program) 2021/02/03 15:44:25 fetching corpus: 6090, signal 431337/457748 (executing program) 2021/02/03 15:44:25 fetching corpus: 6140, signal 432368/458508 (executing program) 2021/02/03 15:44:25 fetching corpus: 6189, signal 433114/459059 (executing program) 2021/02/03 15:44:25 fetching corpus: 6239, signal 434120/459762 (executing program) 2021/02/03 15:44:25 fetching corpus: 6289, signal 434808/460305 (executing program) 2021/02/03 15:44:26 fetching corpus: 6339, signal 435489/460884 (executing program) 2021/02/03 15:44:26 fetching corpus: 6389, signal 436369/461496 (executing program) 2021/02/03 15:44:26 fetching corpus: 6438, signal 437803/462401 (executing program) 2021/02/03 15:44:26 fetching corpus: 6488, signal 438740/463028 (executing program) 2021/02/03 15:44:26 fetching corpus: 6538, signal 439603/463584 (executing program) 2021/02/03 15:44:26 fetching corpus: 6587, signal 440552/464231 (executing program) 2021/02/03 15:44:26 fetching corpus: 6637, signal 441327/464757 (executing program) 2021/02/03 15:44:27 fetching corpus: 6687, signal 442277/465356 (executing program) 2021/02/03 15:44:27 fetching corpus: 6737, signal 443667/466100 (executing program) 2021/02/03 15:44:27 fetching corpus: 6787, signal 444525/466645 (executing program) 2021/02/03 15:44:27 fetching corpus: 6837, signal 445738/467295 (executing program) 2021/02/03 15:44:27 fetching corpus: 6887, signal 447171/468036 (executing program) 2021/02/03 15:44:28 fetching corpus: 6937, signal 448082/468560 (executing program) 2021/02/03 15:44:28 fetching corpus: 6987, signal 448881/469059 (executing program) 2021/02/03 15:44:28 fetching corpus: 7037, signal 450058/469658 (executing program) 2021/02/03 15:44:28 fetching corpus: 7087, signal 450697/470058 (executing program) 2021/02/03 15:44:28 fetching corpus: 7137, signal 451418/470493 (executing program) 2021/02/03 15:44:28 fetching corpus: 7187, signal 452608/471121 (executing program) 2021/02/03 15:44:28 fetching corpus: 7237, signal 453165/471464 (executing program) 2021/02/03 15:44:29 fetching corpus: 7287, signal 454574/472140 (executing program) 2021/02/03 15:44:29 fetching corpus: 7337, signal 455772/472724 (executing program) 2021/02/03 15:44:29 fetching corpus: 7387, signal 456978/473311 (executing program) 2021/02/03 15:44:29 fetching corpus: 7437, signal 457913/473795 (executing program) 2021/02/03 15:44:29 fetching corpus: 7487, signal 459132/474334 (executing program) 2021/02/03 15:44:29 fetching corpus: 7537, signal 460351/474901 (executing program) 2021/02/03 15:44:30 fetching corpus: 7587, signal 461463/475407 (executing program) 2021/02/03 15:44:30 fetching corpus: 7637, signal 462480/475871 (executing program) 2021/02/03 15:44:30 fetching corpus: 7686, signal 463557/476331 (executing program) 2021/02/03 15:44:30 fetching corpus: 7735, signal 464365/476732 (executing program) 2021/02/03 15:44:30 fetching corpus: 7785, signal 465114/477085 (executing program) 2021/02/03 15:44:30 fetching corpus: 7835, signal 466050/477495 (executing program) 2021/02/03 15:44:31 fetching corpus: 7884, signal 466905/477847 (executing program) 2021/02/03 15:44:31 fetching corpus: 7934, signal 469071/478645 (executing program) 2021/02/03 15:44:31 fetching corpus: 7983, signal 470183/479069 (executing program) 2021/02/03 15:44:31 fetching corpus: 8033, signal 471284/479491 (executing program) 2021/02/03 15:44:31 fetching corpus: 8083, signal 472225/479851 (executing program) 2021/02/03 15:44:31 fetching corpus: 8133, signal 472763/480057 (executing program) 2021/02/03 15:44:31 fetching corpus: 8180, signal 473593/480367 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480412 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480449 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480489 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480534 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480580 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480619 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480659 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480703 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480748 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480797 (executing program) 2021/02/03 15:44:31 fetching corpus: 8181, signal 473596/480836 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/480882 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/480933 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/480988 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481030 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481085 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481129 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481191 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481242 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481285 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481331 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481368 (executing program) 2021/02/03 15:44:32 fetching corpus: 8181, signal 473596/481416 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481459 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481510 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481553 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481586 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481625 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481667 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481711 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481748 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481789 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481824 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481874 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481921 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/481970 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482017 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482072 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482102 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482145 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482183 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482237 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482274 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482309 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482362 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482412 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482457 (executing program) 2021/02/03 15:44:32 fetching corpus: 8182, signal 473598/482507 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482558 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482604 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482656 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482703 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482745 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482783 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482819 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482858 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482895 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482934 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/482979 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483015 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483055 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483099 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483146 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483181 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483229 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483267 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483317 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483358 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483406 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483444 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483490 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483535 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483572 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483601 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483634 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483675 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483705 (executing program) 2021/02/03 15:44:32 fetching corpus: 8183, signal 473606/483705 (executing program) 2021/02/03 15:44:34 starting 6 fuzzer processes 15:44:34 executing program 0: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', '&\x00'}, 0x8) 15:44:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x7ffffffff000) 15:44:35 executing program 2: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000ffffffff", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 15:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 15:44:35 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/4096, 0x1000) syzkaller login: [ 107.222523][ T8426] IPVS: ftp: loaded support on port[0] = 21 15:44:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) [ 107.430954][ T8428] IPVS: ftp: loaded support on port[0] = 21 [ 107.789382][ T8430] IPVS: ftp: loaded support on port[0] = 21 [ 107.828877][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 107.964604][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 108.075868][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.088113][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.095508][ T8432] IPVS: ftp: loaded support on port[0] = 21 [ 108.100266][ T8426] device bridge_slave_0 entered promiscuous mode [ 108.138552][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.146059][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.156130][ T8426] device bridge_slave_1 entered promiscuous mode [ 108.229275][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.279357][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.289913][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 108.376733][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.384105][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.394016][ T8428] device bridge_slave_0 entered promiscuous mode [ 108.406923][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.416550][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.425514][ T8428] device bridge_slave_1 entered promiscuous mode [ 108.482903][ T8426] team0: Port device team_slave_0 added [ 108.536984][ T8426] team0: Port device team_slave_1 added [ 108.546079][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.614663][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.642725][ T8430] chnl_net:caif_netlink_parms(): no params data found [ 108.655805][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.666439][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.693734][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.740302][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.747623][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.776231][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.802038][ T8428] team0: Port device team_slave_0 added [ 108.837154][ T8428] team0: Port device team_slave_1 added [ 108.867571][ T8426] device hsr_slave_0 entered promiscuous mode [ 108.885613][ T8426] device hsr_slave_1 entered promiscuous mode [ 108.976045][ T8595] IPVS: ftp: loaded support on port[0] = 21 [ 109.162685][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.173771][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.203237][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.217632][ T3141] Bluetooth: hci0: command 0x0409 tx timeout [ 109.248943][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 109.270313][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.277399][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.304949][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.344220][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 109.362575][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.370057][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.381428][ T8430] device bridge_slave_0 entered promiscuous mode [ 109.391567][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.399526][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.409861][ T8430] device bridge_slave_1 entered promiscuous mode [ 109.427902][ T3141] Bluetooth: hci1: command 0x0409 tx timeout [ 109.490815][ T8428] device hsr_slave_0 entered promiscuous mode [ 109.501097][ T8428] device hsr_slave_1 entered promiscuous mode [ 109.510681][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.520664][ T8428] Cannot create hsr debugfs directory [ 109.536693][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.585320][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.668498][ T3141] Bluetooth: hci2: command 0x0409 tx timeout [ 109.715620][ T8430] team0: Port device team_slave_0 added [ 109.775710][ T8430] team0: Port device team_slave_1 added [ 109.814427][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.822553][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.832712][ T8434] device bridge_slave_0 entered promiscuous mode [ 109.842174][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.850714][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.859089][ T8434] device bridge_slave_1 entered promiscuous mode [ 109.890489][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.901604][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.911332][ T8432] device bridge_slave_0 entered promiscuous mode [ 109.921899][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.933296][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.941971][ T8432] device bridge_slave_1 entered promiscuous mode [ 110.004567][ T3141] Bluetooth: hci3: command 0x0409 tx timeout [ 110.015033][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.043958][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.054762][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.087933][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.157382][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.191553][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.211752][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.221226][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.248537][ T19] Bluetooth: hci4: command 0x0409 tx timeout [ 110.251048][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.287243][ T8434] team0: Port device team_slave_0 added [ 110.308405][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.349794][ T8434] team0: Port device team_slave_1 added [ 110.370623][ T8595] chnl_net:caif_netlink_parms(): no params data found [ 110.420132][ T8432] team0: Port device team_slave_0 added [ 110.493645][ T8432] team0: Port device team_slave_1 added [ 110.524056][ T8426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.554007][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.563399][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.594155][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.630094][ T8426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.649664][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.658191][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.692139][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.708341][ T8430] device hsr_slave_0 entered promiscuous mode [ 110.715499][ T8430] device hsr_slave_1 entered promiscuous mode [ 110.724304][ T8430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.732648][ T8430] Cannot create hsr debugfs directory [ 110.740284][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.748003][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.780638][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.795039][ T8426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.811164][ T8426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.854824][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.864346][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.895713][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.939677][ T8434] device hsr_slave_0 entered promiscuous mode [ 110.947980][ T19] Bluetooth: hci5: command 0x0409 tx timeout [ 110.954520][ T8434] device hsr_slave_1 entered promiscuous mode [ 110.962171][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.970021][ T8434] Cannot create hsr debugfs directory [ 111.080354][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.087577][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.096595][ T8595] device bridge_slave_0 entered promiscuous mode [ 111.133023][ T8432] device hsr_slave_0 entered promiscuous mode [ 111.141970][ T8432] device hsr_slave_1 entered promiscuous mode [ 111.155746][ T8432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.165236][ T8432] Cannot create hsr debugfs directory [ 111.203964][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.211780][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.222222][ T8595] device bridge_slave_1 entered promiscuous mode [ 111.244436][ T8428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.268014][ T3869] Bluetooth: hci0: command 0x041b tx timeout [ 111.302760][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.313823][ T8428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.346218][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.358631][ T8428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.375825][ T8428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.454846][ T8595] team0: Port device team_slave_0 added [ 111.471745][ T8595] team0: Port device team_slave_1 added [ 111.511553][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 111.592786][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.601109][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.631046][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.646348][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.656265][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.683664][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.747981][ T19] Bluetooth: hci2: command 0x041b tx timeout [ 111.762491][ T8595] device hsr_slave_0 entered promiscuous mode [ 111.771498][ T8595] device hsr_slave_1 entered promiscuous mode [ 111.779284][ T8595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.787563][ T8595] Cannot create hsr debugfs directory [ 111.867412][ T8430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.892189][ T8430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.905554][ T8430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.931478][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.961277][ T8430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.037346][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.050213][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.068116][ T19] Bluetooth: hci3: command 0x041b tx timeout [ 112.073061][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.115896][ T8434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.182926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.193996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.205213][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.213292][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.224148][ T8434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.240533][ T8434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.254796][ T8434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.283512][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.298363][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.307731][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.308263][ T3869] Bluetooth: hci4: command 0x041b tx timeout [ 112.317188][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.329226][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.382186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.444528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.454796][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.465135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.476771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.486285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.503528][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.515940][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.529483][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.554863][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.586250][ T8432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.596812][ T8432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.622770][ T8432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.640240][ T8432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.654910][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.668242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.676871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.696907][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.729496][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.742361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.753491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.769649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.779430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.788915][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.796049][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.826038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.836772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.846698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.859092][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.866823][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.876715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.925240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.935074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.947396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.981260][ T8430] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.998393][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.007474][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.029577][ T9533] Bluetooth: hci5: command 0x041b tx timeout [ 113.047723][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.056551][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.065507][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.074194][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.083806][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.101132][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.118195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.127140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.143751][ T8595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.156950][ T8595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.176303][ T8595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.217615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.229554][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.240522][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.247972][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.256629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.267284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.276912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.286525][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.296113][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.304455][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.312482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.322575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.336196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.348194][ T3869] Bluetooth: hci0: command 0x040f tx timeout [ 113.354706][ T8595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.378599][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.395926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.405968][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.415080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.424547][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.487110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.497119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.506525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.516306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.524352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.555200][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.570987][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.580004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.588251][ T3869] Bluetooth: hci1: command 0x040f tx timeout [ 113.589759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.603726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.612763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.621712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.632246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.640678][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.655152][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.672509][ T8426] device veth0_vlan entered promiscuous mode [ 113.711738][ T8426] device veth1_vlan entered promiscuous mode [ 113.726583][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.794069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.805302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.816122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.825569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.828109][ T3869] Bluetooth: hci2: command 0x040f tx timeout [ 113.836568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.850097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.864421][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.907056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.918960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.926991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.937556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.949483][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.961349][ T8428] device veth0_vlan entered promiscuous mode [ 113.972017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.983570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.999230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.008664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.017271][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.024465][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.057236][ T8428] device veth1_vlan entered promiscuous mode [ 114.126385][ T8426] device veth0_macvtap entered promiscuous mode [ 114.148039][ T3869] Bluetooth: hci3: command 0x040f tx timeout [ 114.149044][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.162959][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.175204][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.184722][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.194055][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.201293][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.210869][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.219518][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.227354][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.236845][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.245975][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.281002][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.291594][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.301730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.312341][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.349210][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.357664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.366686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.377277][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.385143][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.388429][ T3869] Bluetooth: hci4: command 0x040f tx timeout [ 114.401274][ T8426] device veth1_macvtap entered promiscuous mode [ 114.439032][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.447400][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.461137][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.472906][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.480089][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.488485][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.497553][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.507191][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.527131][ T8428] device veth0_macvtap entered promiscuous mode [ 114.556895][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.578899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.589101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.599701][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.609051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.617671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.628032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.636830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.646338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.656168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.666226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.676634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.687011][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.698684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.714796][ T8428] device veth1_macvtap entered promiscuous mode [ 114.742471][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.752279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.764258][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.785229][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.802530][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.819592][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.836745][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.846690][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.854096][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.863111][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.872827][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.881667][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.889117][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.897250][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.909375][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.921253][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.930804][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.940034][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.951401][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.961167][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.970134][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.979869][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.988875][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.016438][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.035086][ T8426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.044978][ T8426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.056322][ T8426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.071575][ T8426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.085616][ T8430] device veth0_vlan entered promiscuous mode [ 115.098946][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.116071][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.124994][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.141096][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.152544][ T9533] Bluetooth: hci5: command 0x040f tx timeout [ 115.190540][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.203013][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.213438][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.223508][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.233617][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.243595][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.253962][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.266118][ T8430] device veth1_vlan entered promiscuous mode [ 115.291673][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.302380][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.316613][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.347133][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.356676][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.368302][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.377701][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.387227][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.396633][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.414493][ T8595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.432071][ T3869] Bluetooth: hci0: command 0x0419 tx timeout [ 115.441220][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.452311][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.463681][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.476049][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.502935][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.513337][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.522898][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.535594][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.545657][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.555083][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.592948][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.604290][ T8428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.614660][ T8428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.624493][ T8428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.634054][ T8428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.656635][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.666256][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.687276][ T8430] device veth0_macvtap entered promiscuous mode [ 115.694921][ T9533] Bluetooth: hci1: command 0x0419 tx timeout [ 115.748846][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.760671][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.776890][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.787671][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.799231][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.807240][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.847544][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.866731][ T8430] device veth1_macvtap entered promiscuous mode [ 115.908409][ T9533] Bluetooth: hci2: command 0x0419 tx timeout [ 115.936258][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.951349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.971469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.031123][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.085296][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.088850][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.116039][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.128748][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.141631][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.156857][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.167142][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.228483][ T3869] Bluetooth: hci3: command 0x0419 tx timeout [ 116.229659][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.251061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.278744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.297328][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.312407][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.324160][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.336384][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.349879][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.389853][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.412577][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.443357][ T8430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.468166][ T3869] Bluetooth: hci4: command 0x0419 tx timeout [ 116.486505][ T8430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.502355][ T8430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.514878][ T8430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.546872][ T211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.559019][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.570304][ T211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.580241][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.596598][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.605162][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.615337][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.653410][ T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.664647][ T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.691125][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.709987][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.789269][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.805838][ T8432] device veth0_vlan entered promiscuous mode [ 116.831266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.846192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.855669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.866654][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.922294][ T8595] device veth0_vlan entered promiscuous mode [ 116.933967][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.938315][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.958882][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.965596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.974562][ T37] audit: type=1400 audit(1612367085.608:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=9786 comm="syz-executor.0" [ 117.008665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 15:44:45 executing program 0: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', '&\x00'}, 0x8) [ 117.016821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.036562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.082820][ T8432] device veth1_vlan entered promiscuous mode [ 117.121110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.138830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.147646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 15:44:45 executing program 0: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', '&\x00'}, 0x8) [ 117.173122][ T37] audit: type=1400 audit(1612367085.808:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=9794 comm="syz-executor.0" [ 117.190398][ T9533] Bluetooth: hci5: command 0x0419 tx timeout [ 117.213808][ T8434] device veth0_vlan entered promiscuous mode [ 117.264494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.305401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.342195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.365699][ T37] audit: type=1400 audit(1612367085.998:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=9804 comm="syz-executor.0" 15:44:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x7ffffffff000) [ 117.416098][ T8595] device veth1_vlan entered promiscuous mode 15:44:46 executing program 0: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'stack ', '&\x00'}, 0x8) [ 117.463144][ T8434] device veth1_vlan entered promiscuous mode [ 117.502105][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.577864][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.606801][ T8432] device veth0_macvtap entered promiscuous mode 15:44:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x7ffffffff000) [ 117.617528][ T37] audit: type=1400 audit(1612367086.248:5): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=9811 comm="syz-executor.0" [ 117.649045][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.657142][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.677581][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.701025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 15:44:46 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(0x0, 0x468280, 0xa) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x13, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x5000, &(0x7f0000000200), 0x0, r0}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 117.736152][ T8432] device veth1_macvtap entered promiscuous mode [ 117.789688][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.826741][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:44:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0x4, 0x0, &(0x7f0000000200)=0x7ffffffff000) [ 117.890786][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.900333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.911271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.921219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.936804][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.963959][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.986567][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.007411][ T9825] overlayfs: conflicting lowerdir path [ 118.011216][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.034418][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.059112][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.093799][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.119901][ C1] hrtimer: interrupt took 33402 ns 15:44:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x211}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 118.214375][ T9824] overlayfs: workdir and upperdir must reside under the same mount [ 118.230275][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.246677][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.260547][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.279127][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.292028][ T8434] device veth0_macvtap entered promiscuous mode [ 118.323438][ T8595] device veth0_macvtap entered promiscuous mode [ 118.365199][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.388382][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.401700][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.415879][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.430878][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.442668][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.466017][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.479911][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.493760][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.506080][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.516729][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.573062][ T8434] device veth1_macvtap entered promiscuous mode [ 118.597210][ T8595] device veth1_macvtap entered promiscuous mode [ 118.625328][ T8432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.643712][ T8432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.664593][ T8432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.677124][ T8432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.818707][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.846923][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.866655][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.888403][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.910172][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.931094][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.945722][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.967933][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.981049][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.002550][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.012640][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.024427][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.039276][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.050840][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.062097][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.073280][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.085993][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.096646][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.110318][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:44:47 executing program 2: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000ffffffff", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) [ 119.120989][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.133793][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.150621][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.161518][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.175323][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.186099][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.198450][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.209576][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.220852][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.232069][ T8595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.243790][ T8595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.262106][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.288290][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.308841][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.320437][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.337459][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.382218][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.400407][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.411411][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.422580][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.434057][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.445757][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.457428][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.469999][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.481920][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 119.493092][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.505876][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.530634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.546342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.562157][ T8595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.580554][ T8595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.602677][ T8595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.615561][ T8595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.651228][ T8434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.662669][ T8434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.684242][ T8434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.696180][ T8434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.748735][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.799305][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.818884][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.964813][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.013373][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.056145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.075497][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.087270][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.128686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.177007][ T9883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.214044][ T9883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.223354][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.259405][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.279021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 15:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) [ 120.312064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.391737][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.438264][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.465761][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:44:49 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/4096, 0x1000) 15:44:49 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:49 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) 15:44:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x211}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 15:44:49 executing program 2: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000ffffffff", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 15:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 15:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 15:44:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x211}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 15:44:49 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/4096, 0x1000) 15:44:49 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) [ 120.875106][ T9931] loop5: detected capacity change from 264192 to 0 [ 120.932447][ T9931] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 120.982403][ T37] audit: type=1804 audit(1612367089.618:6): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/1/file0/bus" dev="sda1" ino=14199 res=1 errno=0 15:44:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getneigh={0x20, 0x1e, 0x211}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 15:44:49 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) 15:44:49 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) [ 121.678085][ T37] audit: type=1804 audit(1612367090.308:7): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/1/file0/bus" dev="sda1" ino=14199 res=1 errno=0 [ 121.727562][ T37] audit: type=1804 audit(1612367090.348:8): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/1/file0/bus" dev="sda1" ino=14199 res=1 errno=0 15:44:50 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:50 executing program 2: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000ffffffff", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 15:44:50 executing program 4: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/4096, 0x1000) 15:44:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) 15:44:50 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) 15:44:50 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) 15:44:50 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:50 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {0x0}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4089, 0xff9}, {0x0}], 0x5}}, {{&(0x7f0000003a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{0x0, 0x5f}, {&(0x7f0000003b80)=""/234, 0x131}, {&(0x7f0000003c80)=""/236, 0xec}], 0x3}}, {{&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/158, 0x9e}], 0x4, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f00000008c0)=""/191, 0xfe}, {&(0x7f0000000980)=""/40, 0x28}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x4}}], 0x4, 0x0, 0x0) 15:44:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x3, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) 15:44:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) [ 122.062464][ T9969] loop5: detected capacity change from 264192 to 0 [ 122.082929][ T9969] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 122.139729][ T37] audit: type=1804 audit(1612367090.778:9): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/2/file0/bus" dev="loop5" ino=3 res=1 errno=0 [ 122.226915][ T9977] loop0: detected capacity change from 264192 to 0 [ 122.337324][ T9977] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 122.391143][ T37] audit: type=1804 audit(1612367091.018:10): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir979727022/syzkaller.xdZuQf/9/file0/bus" dev="sda1" ino=14218 res=1 errno=0 15:44:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x3, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) 15:44:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:44:51 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:51 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:51 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) 15:44:51 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:44:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x3, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) [ 122.989796][ T211] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:44:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x3, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) [ 123.103545][T10001] loop0: detected capacity change from 264192 to 0 [ 123.170261][T10001] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 123.207066][ T37] audit: type=1804 audit(1612367091.838:11): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir979727022/syzkaller.xdZuQf/10/bus" dev="sda1" ino=14204 res=1 errno=0 15:44:51 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) [ 123.425406][T10015] loop5: detected capacity change from 264192 to 0 15:44:52 executing program 4: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 123.469996][T10015] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 123.524726][ T37] audit: type=1804 audit(1612367092.158:12): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/3/file0/bus" dev="sda1" ino=14196 res=1 errno=0 15:44:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) 15:44:52 executing program 4: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:44:52 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) [ 124.275556][T10037] loop0: detected capacity change from 264192 to 0 [ 124.313011][T10037] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 124.365045][ T37] audit: type=1804 audit(1612367092.998:13): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir979727022/syzkaller.xdZuQf/11/file0/bus" dev="loop0" ino=4 res=1 errno=0 [ 125.361272][ T9883] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:44:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:44:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:44:56 executing program 4: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:44:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) 15:44:56 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) socket(0x11, 0x80002, 0xc) syz_open_procfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x8) sendfile(r0, r1, 0x0, 0x8400fffffffa) close(0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 15:44:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:44:56 executing program 4: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 127.830282][T10065] loop5: detected capacity change from 264192 to 0 15:44:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) 15:44:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 127.893382][T10065] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:44:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) [ 127.964680][ T37] audit: type=1804 audit(1612367096.598:14): pid=10065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir446291052/syzkaller.ifNM58/4/file0/bus" dev="sda1" ino=14214 res=1 errno=0 15:44:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:44:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r0, 0x409, 0x1a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 15:44:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x9000000, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 15:44:59 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 15:44:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:44:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd4}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 15:44:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x9000000, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 15:45:00 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 15:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x9000000, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 15:45:00 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 15:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x9000000, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 15:45:00 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xa0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 15:45:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:45:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) 15:45:01 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:45:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 15:45:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) 15:45:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000400)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) dup2(r1, r3) [ 135.625195][ T37] audit: type=1804 audit(1612367104.258:15): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir218772548/syzkaller.qzrvJw/8/bus" dev="sda1" ino=14213 res=1 errno=0 [ 135.666833][T10198] ================================================================== [ 135.675957][T10198] BUG: KASAN: use-after-free in uprobe_munmap+0x485/0x560 [ 135.683782][T10198] Read of size 8 at addr ffff88801eb52568 by task syz-executor.2/10198 [ 135.693034][T10198] [ 135.695586][T10198] CPU: 0 PID: 10198 Comm: syz-executor.2 Not tainted 5.11.0-rc6-next-20210203-syzkaller #0 [ 135.706123][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.712681][ T37] audit: type=1804 audit(1612367104.268:16): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir218772548/syzkaller.qzrvJw/8/bus" dev="sda1" ino=14213 res=1 errno=0 [ 135.716536][T10198] Call Trace: [ 135.745333][T10198] dump_stack+0x107/0x163 [ 135.749726][T10198] ? uprobe_munmap+0x485/0x560 [ 135.754533][T10198] ? uprobe_munmap+0x485/0x560 [ 135.759621][T10198] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 135.767474][T10198] ? uprobe_munmap+0x485/0x560 [ 135.772290][T10198] ? uprobe_munmap+0x485/0x560 [ 135.777394][T10198] kasan_report.cold+0x7c/0xd8 [ 135.782653][T10198] ? uprobe_munmap+0x485/0x560 [ 135.787475][T10198] uprobe_munmap+0x485/0x560 [ 135.790663][ T37] audit: type=1804 audit(1612367104.298:17): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir218772548/syzkaller.qzrvJw/8/bus" dev="sda1" ino=14213 res=1 errno=0 [ 135.792468][T10198] unmap_single_vma+0xe9/0x300 [ 135.792517][T10198] zap_page_range_single+0x2c6/0x440 [ 135.792559][T10198] ? unmap_single_vma+0x300/0x300 [ 135.835074][T10198] ? lock_release+0x710/0x710 [ 135.839860][T10198] ? down_write+0xdb/0x150 [ 135.844354][T10198] ? down_write_killable_nested+0x170/0x170 [ 135.850483][T10198] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 135.856433][T10198] ? vma_interval_tree_subtree_search+0x163/0x1d0 [ 135.862932][T10198] unmap_mapping_pages+0x223/0x2a0 [ 135.868391][T10198] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 135.874861][T10198] ? do_wp_page+0x1930/0x1930 [ 135.879697][T10198] ? downgrade_write+0x3a0/0x3a0 [ 135.885890][T10198] ? down_write_killable_nested+0x170/0x170 [ 135.891927][T10198] truncate_pagecache+0x51/0x90 [ 135.897688][T10198] ext4_setattr+0x11c7/0x1fe0 [ 135.902510][T10198] ? projid_m_show+0x220/0x220 [ 135.907327][T10198] ? ext4_journalled_write_end+0x15a0/0x15a0 [ 135.913354][T10198] notify_change+0xb28/0x10f0 [ 135.918104][T10198] do_truncate+0x13c/0x200 [ 135.922558][T10198] ? file_open_root+0x410/0x410 [ 135.927541][T10198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 135.934794][T10198] ? common_perm_cond+0x1e4/0x7b0 [ 135.940166][T10198] path_openat+0x20e4/0x27e0 [ 135.944910][T10198] ? path_lookupat+0x830/0x830 [ 135.949845][T10198] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 135.957649][T10198] do_filp_open+0x17e/0x3c0 [ 135.962281][T10198] ? may_open_dev+0xf0/0xf0 [ 135.967356][T10198] ? do_raw_spin_lock+0x120/0x2b0 [ 135.972430][T10198] ? rwlock_bug.part.0+0x90/0x90 [ 135.978192][T10198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 135.984480][T10198] ? _raw_spin_unlock+0x24/0x40 [ 135.989837][T10198] ? alloc_fd+0x2bc/0x640 [ 135.995230][T10198] do_sys_openat2+0x16d/0x420 [ 136.000046][T10198] ? build_open_flags+0x6f0/0x6f0 [ 136.006072][T10198] ? perf_event_set_output+0x4c0/0x4c0 [ 136.011779][T10198] __x64_sys_open+0x119/0x1c0 [ 136.016515][T10198] ? do_sys_open+0x140/0x140 [ 136.021557][T10198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.028693][T10198] do_syscall_64+0x2d/0x70 [ 136.033189][T10198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 136.039132][T10198] RIP: 0033:0x465b09 [ 136.043066][T10198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.063031][T10198] RSP: 002b:00007f6fe9bd4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 136.071605][T10198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 136.079616][T10198] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000020000080 [ 136.087917][T10198] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 136.096119][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 136.104137][T10198] R13: 00007ffe2d8146bf R14: 00007f6fe9bd4300 R15: 0000000000022000 [ 136.112181][T10198] [ 136.114559][T10198] Allocated by task 10198: [ 136.119192][T10198] kasan_save_stack+0x1b/0x40 [ 136.123922][T10198] ____kasan_kmalloc.constprop.0+0xa0/0xd0 [ 136.130192][T10198] __uprobe_register+0x19c/0x850 [ 136.135167][T10198] probe_event_enable+0x357/0xa00 [ 136.140257][T10198] trace_uprobe_register+0x443/0x880 [ 136.145702][T10198] perf_trace_event_init+0x549/0xa20 [ 136.151134][T10198] perf_uprobe_init+0x16f/0x210 [ 136.156032][T10198] perf_uprobe_event_init+0xff/0x1c0 [ 136.161560][T10198] perf_try_init_event+0x12a/0x560 [ 136.166765][T10198] perf_event_alloc.part.0+0xe3b/0x3960 [ 136.172353][T10198] __do_sys_perf_event_open+0x647/0x2e60 [ 136.178238][T10198] do_syscall_64+0x2d/0x70 [ 136.182700][T10198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 136.188671][T10198] [ 136.191036][T10198] Freed by task 10198: [ 136.195125][T10198] kasan_save_stack+0x1b/0x40 [ 136.199854][T10198] kasan_set_track+0x1c/0x30 [ 136.204483][T10198] kasan_set_free_info+0x20/0x30 [ 136.209464][T10198] ____kasan_slab_free.part.0+0xe1/0x110 [ 136.215144][T10198] slab_free_freelist_hook+0x82/0x1d0 [ 136.220569][T10198] kfree+0xe5/0x7b0 [ 136.224416][T10198] put_uprobe+0x13b/0x190 [ 136.228779][T10198] uprobe_apply+0xfc/0x130 [ 136.233382][T10198] trace_uprobe_register+0x5c9/0x880 [ 136.238712][T10198] perf_trace_event_init+0x17a/0xa20 [ 136.244045][T10198] perf_uprobe_init+0x16f/0x210 [ 136.248965][T10198] perf_uprobe_event_init+0xff/0x1c0 [ 136.254897][T10198] perf_try_init_event+0x12a/0x560 [ 136.260060][T10198] perf_event_alloc.part.0+0xe3b/0x3960 [ 136.265904][T10198] __do_sys_perf_event_open+0x647/0x2e60 [ 136.271584][T10198] do_syscall_64+0x2d/0x70 [ 136.276147][T10198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 136.282089][T10198] [ 136.284564][T10198] The buggy address belongs to the object at ffff88801eb52400 [ 136.284564][T10198] which belongs to the cache kmalloc-512 of size 512 [ 136.299275][T10198] The buggy address is located 360 bytes inside of [ 136.299275][T10198] 512-byte region [ffff88801eb52400, ffff88801eb52600) [ 136.313775][T10198] The buggy address belongs to the page: 15:45:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:45:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x87, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x3081, 0x0, 0x4) io_uring_enter(r2, 0x6c1c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x24ae, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 136.319427][T10198] page:00000000acd611c7 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1eb52 [ 136.329619][T10198] head:00000000acd611c7 order:1 compound_mapcount:0 [ 136.336240][T10198] flags: 0xfff00000010200(slab|head) [ 136.341585][T10198] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888010841c80 [ 136.350470][T10198] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 136.359178][T10198] page dumped because: kasan: bad access detected [ 136.366221][T10198] [ 136.369121][T10198] Memory state around the buggy address: [ 136.374874][T10198] ffff88801eb52400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.383166][T10198] ffff88801eb52480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.392612][T10198] >ffff88801eb52500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.402019][T10198] ^ [ 136.409487][T10198] ffff88801eb52580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.417584][T10198] ffff88801eb52600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.425758][T10198] ================================================================== [ 136.433862][T10198] Disabling lock debugging due to kernel taint [ 136.443647][T10198] Kernel panic - not syncing: panic_on_warn set ... [ 136.450381][T10198] CPU: 0 PID: 10198 Comm: syz-executor.2 Tainted: G B 5.11.0-rc6-next-20210203-syzkaller #0 [ 136.462040][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.472645][T10198] Call Trace: [ 136.475976][T10198] dump_stack+0x107/0x163 [ 136.480769][T10198] ? uprobe_munmap+0x410/0x560 [ 136.485552][T10198] panic+0x306/0x73d [ 136.489486][T10198] ? __warn_printk+0xf3/0xf3 [ 136.494087][T10198] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 136.500525][T10198] ? trace_hardirqs_on+0x38/0x1c0 [ 136.505687][T10198] ? trace_hardirqs_on+0x51/0x1c0 [ 136.510722][T10198] ? uprobe_munmap+0x485/0x560 [ 136.516621][T10198] ? uprobe_munmap+0x485/0x560 [ 136.521411][T10198] end_report.cold+0x5a/0x5a [ 136.526121][T10198] kasan_report.cold+0x6a/0xd8 [ 136.530995][T10198] ? uprobe_munmap+0x485/0x560 [ 136.536761][T10198] uprobe_munmap+0x485/0x560 [ 136.541354][T10198] unmap_single_vma+0xe9/0x300 [ 136.546133][T10198] zap_page_range_single+0x2c6/0x440 [ 136.551493][T10198] ? unmap_single_vma+0x300/0x300 [ 136.556656][T10198] ? lock_release+0x710/0x710 [ 136.561592][T10198] ? down_write+0xdb/0x150 [ 136.566592][T10198] ? down_write_killable_nested+0x170/0x170 [ 136.572494][T10198] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 136.578215][T10198] ? vma_interval_tree_subtree_search+0x163/0x1d0 [ 136.585730][T10198] unmap_mapping_pages+0x223/0x2a0 [ 136.590994][T10198] ? jbd2_buffer_abort_trigger+0x80/0x80 [ 136.596819][T10198] ? do_wp_page+0x1930/0x1930 [ 136.601580][T10198] ? downgrade_write+0x3a0/0x3a0 [ 136.606760][T10198] ? down_write_killable_nested+0x170/0x170 [ 136.612663][T10198] truncate_pagecache+0x51/0x90 [ 136.617617][T10198] ext4_setattr+0x11c7/0x1fe0 [ 136.622496][T10198] ? projid_m_show+0x220/0x220 [ 136.627292][T10198] ? ext4_journalled_write_end+0x15a0/0x15a0 [ 136.633268][T10198] notify_change+0xb28/0x10f0 [ 136.637967][T10198] do_truncate+0x13c/0x200 [ 136.642389][T10198] ? file_open_root+0x410/0x410 [ 136.647241][T10198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 136.653491][T10198] ? common_perm_cond+0x1e4/0x7b0 [ 136.658546][T10198] path_openat+0x20e4/0x27e0 [ 136.663167][T10198] ? path_lookupat+0x830/0x830 [ 136.667937][T10198] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 136.673934][T10198] do_filp_open+0x17e/0x3c0 [ 136.678492][T10198] ? may_open_dev+0xf0/0xf0 [ 136.683000][T10198] ? do_raw_spin_lock+0x120/0x2b0 [ 136.688039][T10198] ? rwlock_bug.part.0+0x90/0x90 [ 136.693013][T10198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 136.699277][T10198] ? _raw_spin_unlock+0x24/0x40 [ 136.704216][T10198] ? alloc_fd+0x2bc/0x640 [ 136.708663][T10198] do_sys_openat2+0x16d/0x420 [ 136.714524][T10198] ? build_open_flags+0x6f0/0x6f0 [ 136.719758][T10198] ? perf_event_set_output+0x4c0/0x4c0 [ 136.725398][T10198] __x64_sys_open+0x119/0x1c0 [ 136.730206][T10198] ? do_sys_open+0x140/0x140 [ 136.734789][T10198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 136.740688][T10198] do_syscall_64+0x2d/0x70 [ 136.745138][T10198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 136.751038][T10198] RIP: 0033:0x465b09 [ 136.758251][T10198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.778533][T10198] RSP: 002b:00007f6fe9bd4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 136.786987][T10198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 136.794969][T10198] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000020000080 [ 136.803103][T10198] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 136.812001][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 136.820662][T10198] R13: 00007ffe2d8146bf R14: 00007f6fe9bd4300 R15: 0000000000022000 [ 136.829428][T10198] Kernel Offset: disabled [ 136.833856][T10198] Rebooting in 86400 seconds..