Warning: Permanently added '[localhost]:1352' (ECDSA) to the list of known hosts. [ 164.347759][ T38] audit: type=1400 audit(1584853157.603:42): avc: denied { map } for pid=10178 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/03/22 04:59:17 fuzzer started 2020/03/22 04:59:24 dialing manager at 10.0.2.10:38399 2020/03/22 04:59:25 syscalls: 3010 2020/03/22 04:59:25 code coverage: enabled 2020/03/22 04:59:25 comparison tracing: enabled 2020/03/22 04:59:25 extra coverage: enabled 2020/03/22 04:59:25 setuid sandbox: enabled 2020/03/22 04:59:25 namespace sandbox: enabled 2020/03/22 04:59:25 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/22 04:59:25 fault injection: enabled 2020/03/22 04:59:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/22 04:59:25 net packet injection: enabled 2020/03/22 04:59:25 net device setup: enabled 2020/03/22 04:59:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/22 04:59:25 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 172.196758][ T38] audit: type=1400 audit(1584853165.443:43): avc: denied { integrity } for pid=10195 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 05:00:43 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='\xa5E\f\x87\xda\n\xd9F\x8d\x9b\xfe\x9d\xa10|q\"\xf5\x17D\xc4\xf8\x00\x00$3\x92\xe6e\xe4\xec\xad\x1c.\b\x06\xa76\x82\xc3\x8b\xa2\x95\xb7\x8e\x12;(\xd2\xfc\xf2\x93\xa2\x9a\xdb \x10!\n$\x15\xdc\xf6u\xe3\f\xc0Q\xcf\xa1\xe1\xb8\xaeibz\x99\xf6\x83\xb3%y\xb0U=\xb4\xf4\xcc\xd8\x9a\x11\x9fBk\xc5\x1ah\x13\xba_~c\xa1!\xeei\x97Pi\xb9z?\xacUY8\xb4a\xf1\x88\xff$\xccd\xfa6u\x86\x1d\xb7(\vO\xb7\xb9\x8c\x9b\x9et\xf0F\xc2\xb5\xb0\xb4\xb8', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='autogroup\x00') [ 250.610635][ T38] audit: type=1400 audit(1584853243.853:44): avc: denied { map } for pid=10199 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3097 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 05:00:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:00:44 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) [ 251.797729][T10202] IPVS: ftp: loaded support on port[0] = 21 [ 251.799027][T10201] IPVS: ftp: loaded support on port[0] = 21 05:00:45 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0xe, 0x2}) [ 252.143916][T10205] IPVS: ftp: loaded support on port[0] = 21 [ 252.475316][T10206] IPVS: ftp: loaded support on port[0] = 21 [ 252.516907][T10202] chnl_net:caif_netlink_parms(): no params data found [ 252.635563][T10201] chnl_net:caif_netlink_parms(): no params data found [ 252.726224][T10205] chnl_net:caif_netlink_parms(): no params data found [ 252.828909][T10202] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.843360][T10202] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.868899][T10202] device bridge_slave_0 entered promiscuous mode [ 252.942445][T10202] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.977303][T10202] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.004935][T10202] device bridge_slave_1 entered promiscuous mode [ 253.128188][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.142566][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.157834][T10201] device bridge_slave_0 entered promiscuous mode [ 253.179917][T10202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.225883][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.243728][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.257476][T10205] device bridge_slave_0 entered promiscuous mode [ 253.287533][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.313154][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.338919][T10201] device bridge_slave_1 entered promiscuous mode [ 253.378701][T10202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.424599][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.460626][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.492085][T10205] device bridge_slave_1 entered promiscuous mode [ 253.612990][T10206] chnl_net:caif_netlink_parms(): no params data found [ 253.672804][T10201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.734770][T10201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.762534][T10205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.819602][T10202] team0: Port device team_slave_0 added [ 253.846209][T10202] team0: Port device team_slave_1 added [ 253.870193][T10205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.933542][T10202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.966962][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.130485][T10202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.206001][T10201] team0: Port device team_slave_0 added [ 254.264818][T10202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.318258][T10202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.511684][T10202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.587243][T10201] team0: Port device team_slave_1 added [ 254.684464][T10205] team0: Port device team_slave_0 added [ 254.791750][T10201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.842043][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.007429][T10201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.080451][T10205] team0: Port device team_slave_1 added [ 255.171560][T10201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.220852][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.391327][T10201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.537486][T10202] device hsr_slave_0 entered promiscuous mode [ 255.630132][T10202] device hsr_slave_1 entered promiscuous mode [ 255.719662][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.752850][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.789919][T10206] device bridge_slave_0 entered promiscuous mode [ 255.859208][T10205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.903015][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.041853][T10205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.099259][T10205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.124112][T10205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.259501][T10205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.323015][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.375361][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.414434][T10206] device bridge_slave_1 entered promiscuous mode [ 256.610827][T10201] device hsr_slave_0 entered promiscuous mode [ 256.717164][T10201] device hsr_slave_1 entered promiscuous mode [ 256.787103][T10201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.806330][T10201] Cannot create hsr debugfs directory [ 256.846037][T10206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.893794][T10206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.061007][T10205] device hsr_slave_0 entered promiscuous mode [ 257.127468][T10205] device hsr_slave_1 entered promiscuous mode [ 257.206706][T10205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.231428][T10205] Cannot create hsr debugfs directory [ 257.268518][T10206] team0: Port device team_slave_0 added [ 257.318567][T10206] team0: Port device team_slave_1 added [ 257.371212][T10206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.386853][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.441618][T10206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.479440][T10206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.498637][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.593298][T10206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.844401][T10206] device hsr_slave_0 entered promiscuous mode [ 257.918265][T10206] device hsr_slave_1 entered promiscuous mode [ 257.996880][T10206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.015518][T10206] Cannot create hsr debugfs directory [ 258.117707][ T38] audit: type=1400 audit(1584853251.363:45): avc: denied { create } for pid=10202 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 258.150648][T10202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.225766][ T38] audit: type=1400 audit(1584853251.373:46): avc: denied { write } for pid=10202 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 258.307827][ T38] audit: type=1400 audit(1584853251.373:47): avc: denied { read } for pid=10202 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 258.344107][T10202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.475684][T10202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.865692][T10202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.092829][T10201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.205778][T10201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.306201][T10201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.409080][T10201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.613695][T10205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.708291][T10205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.771579][T10205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.859968][T10205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.018687][T10206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.118458][T10206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.216108][T10206] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.333727][T10206] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.644837][T10202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.731436][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.771150][T10205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.852090][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.898061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.929567][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.981955][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.035409][T10206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.075052][T10202] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.111802][T10205] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.187114][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.215867][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.244921][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.279078][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.321281][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.351175][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.401590][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.460549][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.508405][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.552688][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.590996][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.632202][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.668340][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.712605][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.765260][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.827861][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.868666][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.909440][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.947630][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.978029][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.018012][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.113521][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.164771][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.204490][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.245173][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.269587][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.294393][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.322086][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.351095][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.402010][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.439667][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.475301][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.533756][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.590798][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.642689][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.686317][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.725833][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.768265][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.810446][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.859302][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.908423][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.948819][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.977844][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.011705][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.047560][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.089199][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.124880][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.172103][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.197281][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.223714][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.246773][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.275386][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.303224][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.336000][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.373599][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.459142][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.477686][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.499967][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.525083][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.563549][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.592132][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.617186][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.647914][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.666635][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.699906][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.724872][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.746935][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.768909][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.809678][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.830758][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.854059][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.877174][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.931700][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.064016][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.088317][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.109625][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.141506][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.194993][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.211953][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.231717][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.252981][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.289162][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.305466][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.322262][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.339036][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.363274][T10205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.383428][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.399697][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.415297][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.432519][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.452842][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.501520][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.536297][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.565040][T10202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.605080][T10206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.631477][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.652433][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.676912][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.702375][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.741570][T10205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.779319][T10201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.798716][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.818982][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.857041][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.875621][ T3320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.938005][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.955171][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.994107][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.030516][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.050721][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.080220][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.111825][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.127983][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.143266][T10202] device veth0_vlan entered promiscuous mode [ 265.163155][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.181080][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.201883][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.224849][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.259626][T10206] device veth0_vlan entered promiscuous mode [ 265.279289][T10202] device veth1_vlan entered promiscuous mode [ 265.295629][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.309782][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.322369][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.335005][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.347769][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.367900][T10206] device veth1_vlan entered promiscuous mode [ 265.396169][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.412774][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.427690][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.444421][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.464747][T10205] device veth0_vlan entered promiscuous mode [ 265.509304][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.547919][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.575049][ T3424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.604717][T10201] device veth0_vlan entered promiscuous mode [ 265.643869][T10205] device veth1_vlan entered promiscuous mode [ 265.692398][T10201] device veth1_vlan entered promiscuous mode [ 265.722092][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.757867][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.801748][T10202] device veth0_macvtap entered promiscuous mode [ 265.871753][T10202] device veth1_macvtap entered promiscuous mode [ 265.894462][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.927856][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.957715][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.979676][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.022453][T10206] device veth0_macvtap entered promiscuous mode [ 266.062057][T10206] device veth1_macvtap entered promiscuous mode [ 266.126301][T10202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.354560][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.385052][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.411514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.437625][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.475495][T10202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.520515][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.541263][T10221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.566768][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.588958][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.648873][T10206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.675422][T10206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.702791][T10206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.725591][T10201] device veth0_macvtap entered promiscuous mode [ 266.745717][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.769775][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.786299][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.808772][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.831876][T10205] device veth0_macvtap entered promiscuous mode [ 266.852425][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.872539][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.021960][T10201] device veth1_macvtap entered promiscuous mode [ 267.071734][T10206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.095347][T10206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.121048][T10206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.264085][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.280534][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.301693][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.324903][T10205] device veth1_macvtap entered promiscuous mode [ 267.434243][ T38] audit: type=1400 audit(1584853260.683:48): avc: denied { associate } for pid=10202 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 267.443285][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.524734][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.554646][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.602823][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.640924][T10201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.663297][T10230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.678003][T10230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.694994][T10230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.793545][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.818499][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.838288][T10201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.860165][T10201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.890004][T10201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.931790][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.000486][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.127521][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.179514][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.217162][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.254272][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.295371][ T38] audit: type=1400 audit(1584853261.533:49): avc: denied { open } for pid=10231 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 268.300266][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.375687][ T38] audit: type=1400 audit(1584853261.533:50): avc: denied { kernel } for pid=10231 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 268.400626][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.468607][ T38] audit: type=1400 audit(1584853261.533:51): avc: denied { confidentiality } for pid=10231 comm="syz-executor.1" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 [ 268.491055][T10205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.668003][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.699814][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.749213][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.800353][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.837734][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.873132][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.909164][T10205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.942111][T10205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.986111][T10205] batman_adv: batadv0: Interface activated: batadv_slave_1 05:01:02 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050400000000000045ed7e00"/22], 0x1c}}, 0x0) [ 269.033777][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.056742][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.062832][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.122500][T10240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 05:01:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) [ 270.030171][ T38] audit: type=1400 audit(1584853263.283:52): avc: denied { map } for pid=10249 comm="syz-executor.0" path=2F6D656D66643AA5450C87DA0AD9468D9BFE9DA1307C7122F51744C4F8202864656C6574656429 dev="tmpfs" ino=38837 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 270.115979][T10256] binder: 10252:10256 ioctl 4018620d 0 returned -22 [ 270.160592][ T38] audit: type=1400 audit(1584853263.413:53): avc: denied { map } for pid=10249 comm="syz-executor.0" path="socket:[38841]" dev="sockfs" ino=38841 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 05:01:03 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800050009000000740001801400020076657468315f766972745f776966690008000300020000001400020067656e657665310000000000000000000800030003000000140002000000000000000000000000000000000008000300000000001400020076657468315f746f5f687372000000000800030002000000"], 0xb}, 0x1, 0x0, 0x0, 0x20040001}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x3202}) close(r7) 05:01:03 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) [ 270.380025][ T38] audit: type=1400 audit(1584853263.633:54): avc: denied { map_create } for pid=10262 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 270.383437][T10261] binder: 10260:10261 ioctl 4018620d 0 returned -22 [ 270.469930][ T38] audit: type=1400 audit(1584853263.693:55): avc: denied { map_read map_write } for pid=10262 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 05:01:03 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) [ 270.602751][T10266] binder: 10265:10266 ioctl 4018620d 0 returned -22 05:01:03 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) [ 270.690087][T10270] binder: 10269:10270 ioctl 4018620d 0 returned -22 05:01:03 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) [ 270.768581][T10273] binder: 10271:10273 ioctl 4018620d 0 returned -22 05:01:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) [ 271.480908][T10280] binder: 10278:10280 ioctl 4018620d 0 returned -22 05:01:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:04 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800050009000000740001801400020076657468315f766972745f776966690008000300020000001400020067656e657665310000000000000000000800030003000000140002000000000000000000000000000000000008000300000000001400020076657468315f746f5f687372000000000800030002000000"], 0xb}, 0x1, 0x0, 0x0, 0x20040001}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x3202}) close(r7) [ 271.651036][T10285] binder: 10284:10285 ioctl 4018620d 0 returned -22 05:01:04 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800050009000000740001801400020076657468315f766972745f776966690008000300020000001400020067656e657665310000000000000000000800030003000000140002000000000000000000000000000000000008000300000000001400020076657468315f746f5f687372000000000800030002000000"], 0xb}, 0x1, 0x0, 0x0, 0x20040001}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x3202}) close(r7) 05:01:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) 05:01:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) 05:01:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) 05:01:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) 05:01:05 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:05 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:05 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800050009000000740001801400020076657468315f766972745f776966690008000300020000001400020067656e657665310000000000000000000800030003000000140002000000000000000000000000000000000008000300000000001400020076657468315f746f5f687372000000000800030002000000"], 0xb}, 0x1, 0x0, 0x0, 0x20040001}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x3202}) close(r7) 05:01:05 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) 05:01:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x14107e, 0x0) write$binfmt_elf32(r1, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x4) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x2008001) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 05:01:05 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:05 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:06 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0) 05:01:06 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) 05:01:06 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) [ 273.416049][ T38] audit: type=1804 audit(1584853266.663:56): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir174565143/syzkaller.5mYZQO/2/file0/file0" dev="sda1" ino=16574 res=1 05:01:06 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f00000005c0)={@remote, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800050009000000740001801400020076657468315f766972745f776966690008000300020000001400020067656e657665310000000000000000000800030003000000140002000000000000000000000000000000000008000300000000001400020076657468315f746f5f687372000000000800030002000000"], 0xb}, 0x1, 0x0, 0x0, 0x20040001}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x3202}) close(r7) 05:01:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) 05:01:06 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, 0x0) [ 273.462436][ T38] audit: type=1804 audit(1584853266.673:57): pid=10330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir174565143/syzkaller.5mYZQO/2/file0/file0" dev="sda1" ino=16574 res=1 05:01:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x14107e, 0x0) write$binfmt_elf32(r1, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x4) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x2008001) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 05:01:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x7) prctl$PR_SET_FP_MODE(0x2d, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x867f, 0x1055c3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0xb}, 0x14) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x401) fchdir(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x7fffffa7) 05:01:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, r4]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) [ 273.749178][ T38] audit: type=1800 audit(1584853267.003:58): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=23 res=0 [ 273.841176][ T38] audit: type=1804 audit(1584853267.003:59): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir505574902/syzkaller.QKbLfk/19/file0/file0" dev="loop2" ino=23 res=1 [ 273.881094][T10368] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 273.960151][T10368] FAT-fs (loop2): Filesystem has been set read-only [ 273.978307][T10368] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17) 05:01:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000170000000000200012800b00010062726964676500001000028007001400bbbbbbbbbbbb000008002000040000001ae7e0eaf22dcf4ead5947abe439f75f249afee700448b277e0fa0daca2d6ddba71c967953dfe224f1bc26b7a1f4404d2515b34cb1100dabbd1bb9c7e5b55268a2d1d3af7b955d96eb77b74d7ca0970a9413e68d29eb"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 284.598104][ T0] NOHZ: local_softirq_pending 08 [ 344.759801][ T0] NOHZ: local_softirq_pending 08 [ 346.028245][ T0] NOHZ: local_softirq_pending 08 [ 351.356746][ T2803] sd 0:0:0:0: [sda] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=65s [ 351.376079][ T2803] sd 0:0:0:0: [sda] tag#19 CDB: Write(10) 2a 00 00 04 3b 90 00 00 58 00 [ 351.411575][ T2803] blk_update_request: I/O error, dev sda, sector 277392 op 0x1:(WRITE) flags 0x0 phys_seg 10 prio class 0 [ 351.433826][ T2803] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 10 writing to inode 16513 starting block 34675) [ 351.469848][ T2803] Buffer I/O error on device sda1, logical block 34418 [ 351.487735][ T2803] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 10 writing to inode 16513 starting block 34685) [ 351.532711][ T2803] sd 0:0:0:0: [sda] tag#18 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 351.539247][ T2017] Buffer I/O error on device sda1, logical block 34419 [ 351.567240][ T2803] sd 0:0:0:0: [sda] tag#18 CDB: Write(10) 2a 00 00 04 2b 90 00 00 58 00 [ 351.594700][ T2017] Buffer I/O error on device sda1, logical block 34420 [ 351.618657][ T2803] blk_update_request: I/O error, dev sda, sector 273296 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 0 [ 351.638726][ T2017] Buffer I/O error on device sda1, logical block 34421 [ 351.666800][ T2803] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 10 writing to inode 16511 starting block 34163) [ 351.687233][ T2017] Buffer I/O error on device sda1, logical block 34422 [ 351.723710][ T2803] Buffer I/O error on device sda1, logical block 33906 [ 351.753004][ T2017] Buffer I/O error on device sda1, logical block 34423 [ 351.768251][ T2803] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 10 writing to inode 16511 starting block 34173) [ 351.782103][ T2017] Buffer I/O error on device sda1, logical block 34424 [ 351.807311][ T2803] sd 0:0:0:0: [sda] tag#17 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 351.820868][ T2017] Buffer I/O error on device sda1, logical block 34425 [ 351.839650][ T2803] sd 0:0:0:0: [sda] tag#17 CDB: Write(10) 2a 00 00 01 37 90 00 00 38 00 [ 351.851309][ T2017] Buffer I/O error on device sda1, logical block 34426 [ 351.868033][ T2803] blk_update_request: I/O error, dev sda, sector 79760 op 0x1:(WRITE) flags 0x103000 phys_seg 7 prio class 0 [ 351.900350][ T2803] Buffer I/O error on dev sda1, logical block 9714, lost async page write [ 351.913929][ T2803] Buffer I/O error on dev sda1, logical block 9715, lost async page write [ 351.926564][ T2803] Buffer I/O error on dev sda1, logical block 9716, lost async page write [ 351.940011][ T2803] Buffer I/O error on dev sda1, logical block 9717, lost async page write [ 351.952906][ T2803] Buffer I/O error on dev sda1, logical block 9718, lost async page write [ 351.966494][ T2803] Buffer I/O error on dev sda1, logical block 9719, lost async page write [ 351.979320][ T2803] Buffer I/O error on dev sda1, logical block 9720, lost async page write [ 351.992498][ T2803] sd 0:0:0:0: [sda] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.008082][ T2803] sd 0:0:0:0: [sda] tag#16 CDB: Write(10) 2a 00 00 01 37 80 00 00 08 00 [ 352.022222][ T2803] blk_update_request: I/O error, dev sda, sector 79744 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 352.041650][ T2803] Buffer I/O error on dev sda1, logical block 9712, lost async page write [ 352.057964][ T2803] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.073441][ T2803] sd 0:0:0:0: [sda] tag#15 CDB: Write(10) 2a 00 00 01 37 50 00 00 08 00 [ 352.086564][ T2803] blk_update_request: I/O error, dev sda, sector 79696 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 352.109289][ T2803] Buffer I/O error on dev sda1, logical block 9706, lost async page write [ 352.129895][ T2803] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.149642][ T2803] sd 0:0:0:0: [sda] tag#14 CDB: Write(10) 2a 00 00 01 37 40 00 00 08 00 [ 352.169751][ T2803] blk_update_request: I/O error, dev sda, sector 79680 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 352.193202][ T2803] Buffer I/O error on dev sda1, logical block 9704, lost async page write [ 352.211700][ T2803] sd 0:0:0:0: [sda] tag#13 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.236124][ T2803] sd 0:0:0:0: [sda] tag#13 CDB: Write(10) 2a 00 00 00 29 48 00 00 30 00 [ 352.258215][ T2803] blk_update_request: I/O error, dev sda, sector 10568 op 0x1:(WRITE) flags 0x103000 phys_seg 6 prio class 0 [ 352.284654][ T2803] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.309795][ T2803] sd 0:0:0:0: [sda] tag#12 CDB: Write(10) 2a 00 00 00 28 88 00 00 08 00 [ 352.335873][ T2803] blk_update_request: I/O error, dev sda, sector 10376 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 352.369743][ T2803] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=66s [ 352.408419][ T2803] sd 0:0:0:0: [sda] tag#11 CDB: Write(10) 2a 00 00 00 0c 10 00 00 08 00 [ 352.434403][ T2803] blk_update_request: I/O error, dev sda, sector 3088 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 352.466913][ T2803] sd 0:0:0:0: [sda] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=67s [ 352.499599][ T2803] sd 0:0:0:0: [sda] tag#10 CDB: Write(10) 2a 00 00 00 08 a0 00 00 08 00 [ 352.523965][ T2803] blk_update_request: I/O error, dev sda, sector 2208 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 407.484949][ T0] NOHZ: local_softirq_pending 08 [ 412.727914][ T1001] ------------[ cut here ]------------ [ 412.727914][ T1001] WARNING: CPU: 1 PID: 1001 at fs/buffer.c:1128 mark_buffer_dirty+0x4fa/0x690 [ 412.782565][ T1001] Kernel panic - not syncing: panic_on_warn set ... [ 412.799484][ T1001] CPU: 1 PID: 1001 Comm: kworker/u17:6 Not tainted 5.6.0-rc6-syzkaller #0 [ 412.799484][ T1001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 412.799484][ T1001] Workqueue: writeback wb_workfn (flush-8:0) [ 412.799484][ T1001] Call Trace: [ 412.799484][ T1001] dump_stack+0x188/0x20d [ 412.799484][ T1001] ? mark_buffer_dirty+0x480/0x690 [ 412.799484][ T1001] panic+0x2e3/0x75c [ 412.936553][ T1001] ? add_taint.cold+0x16/0x16 [ 412.936553][ T1001] ? printk+0xba/0xed [ 412.936553][ T1001] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 412.936553][ T1001] ? __warn.cold+0x14/0x35 [ 412.936553][ T1001] ? __warn+0xd5/0x1c8 [ 412.936553][ T1001] ? mark_buffer_dirty+0x4fa/0x690 [ 412.936553][ T1001] __warn.cold+0x2f/0x35 [ 412.936553][ T1001] ? mark_buffer_dirty+0x4fa/0x690 [ 412.936553][ T1001] report_bug+0x27b/0x2f0 [ 412.936553][ T1001] do_error_trap+0x12b/0x220 [ 412.936553][ T1001] ? mark_buffer_dirty+0x4fa/0x690 [ 413.066584][ T1001] do_invalid_op+0x32/0x40 [ 413.066584][ T1001] ? mark_buffer_dirty+0x4fa/0x690 [ 413.066584][ T1001] invalid_op+0x23/0x30 [ 413.066584][ T1001] RIP: 0010:mark_buffer_dirty+0x4fa/0x690 [ 413.066584][ T1001] Code: 03 80 3c 02 00 0f 85 99 01 00 00 48 8b 3b be 04 00 00 00 e8 08 e5 fc ff 5b 5d 41 5c 41 5d 41 5e e9 ab d5 a9 ff e8 a6 d5 a9 ff <0f> 0b e9 4f fb ff ff e8 9a d5 a9 ff 0f 0b e9 73 fb ff ff e8 8e d5 [ 413.196539][ T1001] RSP: 0018:ffffc90003cc7010 EFLAGS: 00010293 [ 413.196539][ T1001] RAX: ffff8880285f8240 RBX: ffff8880764e05e8 RCX: ffffffff81c84ac7 [ 413.196539][ T1001] RDX: 0000000000000000 RSI: ffffffff81c84f7a RDI: 0000000000000001 [ 413.196539][ T1001] RBP: 0000000000000000 R08: ffff8880285f8240 R09: ffffed100ec9c0be [ 413.196539][ T1001] R10: ffffed100ec9c0bd R11: ffff8880764e05ef R12: 0000000000000000 [ 413.196539][ T1001] R13: 0000000000000000 R14: ffff88801fcb3800 R15: ffff88801cd37abc [ 413.196539][ T1001] ? mark_buffer_dirty+0x47/0x690 [ 413.336953][ T1001] ? mark_buffer_dirty+0x4fa/0x690 [ 413.336953][ T1001] __ext4_handle_dirty_metadata+0x41d/0x7a0 [ 413.336953][ T1001] ext4_mb_mark_diskspace_used+0x943/0x10e0 [ 413.336953][ T1001] ? ext4_mb_regular_allocator+0xec0/0xec0 [ 413.336953][ T1001] ext4_mb_new_blocks+0xb25/0x3930 [ 413.336953][ T1001] ? ext4_ext_search_right+0x2c7/0xb50 [ 413.439982][ T1001] ? ext4_ext_next_allocated_block+0x221/0x2d0 [ 413.439982][ T1001] ext4_ext_map_blocks+0x221c/0x37d0 [ 413.439982][ T1001] ? ext4_ext_release+0x10/0x10 [ 413.439982][ T1001] ? lock_acquire+0x197/0x420 [ 413.439982][ T1001] ? ext4_map_blocks+0x459/0x1650 [ 413.439982][ T1001] ? __down_timeout+0x2d0/0x2d0 [ 413.439982][ T1001] ? ext4_es_lookup_extent+0x41d/0xd30 [ 413.439982][ T1001] ext4_map_blocks+0x4cb/0x1650 [ 413.439982][ T1001] ? ext4_issue_zeroout+0x1e0/0x1e0 [ 413.439982][ T1001] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 413.439982][ T1001] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 413.439982][ T1001] ? ext4_alloc_io_end_vec+0x145/0x1c0 [ 413.439982][ T1001] ext4_writepages+0x19eb/0x3080 [ 413.439982][ T1001] ? ext4_mark_inode_dirty+0x900/0x900 [ 413.439982][ T1001] ? __lock_acquire+0x14bd/0x3ca0 [ 413.439982][ T1001] ? mark_held_locks+0xe0/0xe0 [ 413.439982][ T1001] ? ext4_mark_inode_dirty+0x900/0x900 [ 413.439982][ T1001] ? do_writepages+0xfa/0x2a0 [ 413.439982][ T1001] do_writepages+0xfa/0x2a0 [ 413.439982][ T1001] ? page_writeback_cpu_online+0x10/0x10 [ 413.439982][ T1001] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 413.439982][ T1001] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 413.439982][ T1001] __writeback_single_inode+0x12a/0x1410 [ 413.439982][ T1001] ? _raw_spin_unlock+0x24/0x40 [ 413.439982][ T1001] ? wbc_attach_and_unlock_inode+0x545/0x9c0 [ 413.439982][ T1001] writeback_sb_inodes+0x515/0xdd0 [ 413.439982][ T1001] ? __writeback_single_inode+0x1410/0x1410 [ 413.439982][ T1001] __writeback_inodes_wb+0xc3/0x250 [ 413.439982][ T1001] wb_writeback+0x910/0xd90 [ 413.439982][ T1001] ? writeback_inodes_wb.constprop.0+0x1a0/0x1a0 [ 413.439982][ T1001] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 413.439982][ T1001] ? cpumask_next+0x3c/0x40 [ 413.439982][ T1001] ? get_nr_dirty_inodes+0xd6/0x130 [ 413.439982][ T1001] wb_workfn+0xb50/0x11c0 [ 413.439982][ T1001] ? inode_wait_for_writeback+0x30/0x30 [ 413.439982][ T1001] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 413.439982][ T1001] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 413.439982][ T1001] process_one_work+0x94b/0x1690 [ 413.439982][ T1001] ? pwq_dec_nr_in_flight+0x310/0x310 [ 413.898963][ T1001] ? do_raw_spin_lock+0x129/0x2e0 [ 413.898963][ T1001] worker_thread+0x96/0xe20 [ 413.898963][ T1001] ? process_one_work+0x1690/0x1690 [ 413.898963][ T1001] kthread+0x357/0x430 [ 413.898963][ T1001] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 413.898963][ T1001] ret_from_fork+0x24/0x30 [ 413.898963][ T1001] Kernel Offset: disabled [ 413.898963][ T1001] Rebooting in 86400 seconds..