[ 266.684450][ T41] audit: type=1400 audit(1599484420.209:41): avc: denied { map } for pid=10760 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:10002' (ECDSA) to the list of known hosts. [ 271.894694][ T41] audit: type=1400 audit(1599484425.419:42): avc: denied { map } for pid=10772 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/09/07 13:13:45 fuzzer started 2020/09/07 13:13:47 dialing manager at 10.0.2.10:42083 2020/09/07 13:13:47 syscalls: 3346 2020/09/07 13:13:47 code coverage: enabled 2020/09/07 13:13:47 comparison tracing: enabled 2020/09/07 13:13:47 extra coverage: enabled 2020/09/07 13:13:47 setuid sandbox: enabled 2020/09/07 13:13:47 namespace sandbox: enabled 2020/09/07 13:13:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/07 13:13:47 fault injection: enabled 2020/09/07 13:13:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/07 13:13:47 net packet injection: enabled 2020/09/07 13:13:47 net device setup: enabled 2020/09/07 13:13:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/07 13:13:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/07 13:13:47 USB emulation: enabled 2020/09/07 13:13:47 hci packet injection: enabled [ 273.722668][ T41] audit: type=1400 audit(1599484427.249:43): avc: denied { integrity } for pid=10790 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 13:15:04 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) [ 351.616558][ T41] audit: type=1400 audit(1599484505.129:44): avc: denied { map } for pid=10792 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1062 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 13:15:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x80000001) 13:15:06 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/253, 0xfd) 13:15:07 executing program 3: clone(0x48400880, 0x0, 0x0, 0x0, 0x0) [ 354.994177][T10796] IPVS: ftp: loaded support on port[0] = 21 [ 354.994313][T10794] IPVS: ftp: loaded support on port[0] = 21 [ 355.571699][T10798] IPVS: ftp: loaded support on port[0] = 21 [ 355.989356][T10796] chnl_net:caif_netlink_parms(): no params data found [ 356.087939][T10794] chnl_net:caif_netlink_parms(): no params data found [ 356.306687][T10798] chnl_net:caif_netlink_parms(): no params data found [ 356.430589][T10805] IPVS: ftp: loaded support on port[0] = 21 [ 356.453800][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.502479][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.540704][ T2905] Bluetooth: hci1: command 0x0409 tx timeout [ 356.545731][T10794] device bridge_slave_0 entered promiscuous mode [ 356.565453][ T2905] Bluetooth: hci0: command 0x0409 tx timeout [ 356.621665][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.641203][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.671949][T10796] device bridge_slave_0 entered promiscuous mode [ 356.733438][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.787477][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.831265][T10796] device bridge_slave_1 entered promiscuous mode [ 356.880181][T10794] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.915760][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.954154][T10794] device bridge_slave_1 entered promiscuous mode [ 357.092456][T10796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.159265][T10796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.254492][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.346930][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.407977][T10796] team0: Port device team_slave_0 added [ 357.419124][ T28] Bluetooth: hci2: command 0x0409 tx timeout [ 357.435750][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.490527][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.531028][T10798] device bridge_slave_0 entered promiscuous mode [ 357.574826][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.615361][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.667673][T10798] device bridge_slave_1 entered promiscuous mode [ 357.729809][T10796] team0: Port device team_slave_1 added [ 357.805576][T10796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.847683][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.050034][T10796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.139237][T10796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.191514][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.336167][ T35] Bluetooth: hci3: command 0x0409 tx timeout [ 358.381169][T10796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.455566][T10794] team0: Port device team_slave_0 added [ 358.495961][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.563551][T10794] team0: Port device team_slave_1 added [ 358.590537][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.618607][ T35] Bluetooth: hci0: command 0x041b tx timeout [ 358.653176][T10798] team0: Port device team_slave_0 added [ 358.657810][ T35] Bluetooth: hci1: command 0x041b tx timeout [ 358.707792][T10798] team0: Port device team_slave_1 added [ 358.797931][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.838908][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.011089][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.059772][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.078600][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.145979][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.223021][T10796] device hsr_slave_0 entered promiscuous mode [ 359.296690][T10796] device hsr_slave_1 entered promiscuous mode [ 359.392957][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.419068][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.497514][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.524643][ T39] Bluetooth: hci2: command 0x041b tx timeout [ 359.544539][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.562803][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.719414][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.855239][T10805] chnl_net:caif_netlink_parms(): no params data found [ 359.951006][T10794] device hsr_slave_0 entered promiscuous mode [ 360.018928][T10794] device hsr_slave_1 entered promiscuous mode [ 360.098961][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.141523][T10794] Cannot create hsr debugfs directory [ 360.214684][T10798] device hsr_slave_0 entered promiscuous mode [ 360.318875][T10798] device hsr_slave_1 entered promiscuous mode [ 360.378817][ T28] Bluetooth: hci3: command 0x041b tx timeout [ 360.408713][T10798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.451077][T10798] Cannot create hsr debugfs directory [ 360.698966][ T35] Bluetooth: hci0: command 0x040f tx timeout [ 360.778763][ T35] Bluetooth: hci1: command 0x040f tx timeout [ 360.859862][T10805] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.882256][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.914808][T10805] device bridge_slave_0 entered promiscuous mode [ 360.961331][T10805] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.001307][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.042299][T10805] device bridge_slave_1 entered promiscuous mode [ 361.181566][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.270819][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.353028][T10805] team0: Port device team_slave_0 added [ 361.394223][T10805] team0: Port device team_slave_1 added [ 361.403619][ T41] audit: type=1400 audit(1599484514.929:45): avc: denied { create } for pid=10794 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 361.440854][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.503665][ T41] audit: type=1400 audit(1599484514.929:46): avc: denied { write } for pid=10794 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 361.526163][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.579007][ T39] Bluetooth: hci2: command 0x040f tx timeout [ 361.588992][ T41] audit: type=1400 audit(1599484514.929:47): avc: denied { read } for pid=10794 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 361.850529][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.894052][T10794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.994398][T10794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.072975][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.120081][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.269963][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.344368][T10794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.468624][ T2876] Bluetooth: hci3: command 0x040f tx timeout [ 362.523635][T10794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.790593][ T35] Bluetooth: hci0: command 0x0419 tx timeout [ 362.805528][T10805] device hsr_slave_0 entered promiscuous mode [ 362.859584][ T35] Bluetooth: hci1: command 0x0419 tx timeout [ 362.919678][T10805] device hsr_slave_1 entered promiscuous mode [ 363.008675][T10805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.043139][T10805] Cannot create hsr debugfs directory [ 363.067716][T10796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.205416][T10796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.333866][T10796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.421099][T10796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.544151][T10798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.644770][T10798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.658563][ T2876] Bluetooth: hci2: command 0x0419 tx timeout [ 363.774749][T10798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.877965][T10798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.095076][T10805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.223722][T10805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.351790][T10805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.441956][T10805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.619353][T10821] Bluetooth: hci3: command 0x0419 tx timeout [ 364.841786][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.964233][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.137071][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.204765][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.247487][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.301662][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.391532][T10794] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.443857][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.475744][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.510231][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.539981][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.557543][ T2876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.575611][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.626653][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.674140][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.722426][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.794160][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.883736][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.926257][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.969351][T10821] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.001644][T10821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.036503][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.095407][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.165964][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.325199][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.385202][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.415476][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.435713][ T2905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.496116][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.561701][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.622349][T10794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.654159][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.766353][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.807876][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.844943][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.870902][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.900855][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.939277][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.981222][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.010522][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.044361][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.076717][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.135039][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.164057][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.198886][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.246165][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.285913][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.320992][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.343541][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.366063][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.391705][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.421344][T10796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.451545][T10796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.487965][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.511590][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.533551][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.556615][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.580957][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.604878][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.673627][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.710469][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.738678][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.758451][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.779443][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.802025][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.818518][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.832243][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.844412][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 367.872331][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.887982][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.906850][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.923021][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.950088][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.000650][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.023201][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.045454][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.061784][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.079426][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.114075][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.132074][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.155725][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.175522][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.193249][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.207576][ T3263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.222042][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.234060][ T3263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.277154][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.290335][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.303919][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.317029][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.331084][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.344955][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.372831][T10796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.410784][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.453786][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.502368][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.542536][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.589362][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.636874][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.687329][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.733609][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.794781][T10794] device veth0_vlan entered promiscuous mode [ 368.849813][T10798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.900213][T10798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.930767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.962567][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.989038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.019785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.065382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.089973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.155916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.219116][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.266432][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.306372][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.343171][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.390499][T10794] device veth1_vlan entered promiscuous mode [ 369.421112][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.453462][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.495197][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.624034][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.652845][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.710814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.734892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.757453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.782937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.813228][T10796] device veth0_vlan entered promiscuous mode [ 369.833699][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.871809][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.895789][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.936029][T10796] device veth1_vlan entered promiscuous mode [ 369.950256][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.963050][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.976713][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.992887][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.006959][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.052789][T10794] device veth0_macvtap entered promiscuous mode [ 370.071144][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.086531][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.100077][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.112214][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.130692][T10794] device veth1_macvtap entered promiscuous mode [ 370.157288][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.173148][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.192412][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.209475][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.221533][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.238544][T10798] device veth0_vlan entered promiscuous mode [ 370.254229][T10805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.280191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.293645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.312386][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.330009][T10796] device veth0_macvtap entered promiscuous mode [ 370.345171][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.359400][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.373977][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.395007][T10798] device veth1_vlan entered promiscuous mode [ 370.415106][T10796] device veth1_macvtap entered promiscuous mode [ 370.434046][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.456345][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.473284][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.500807][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.559057][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.577473][T10821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.637938][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 370.667600][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.713153][T10796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.740339][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.766380][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.791547][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.805941][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.831809][T10805] device veth0_vlan entered promiscuous mode [ 371.015616][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.035972][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.049022][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.076986][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.142856][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.168445][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.301723][T10796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.362383][T10805] device veth1_vlan entered promiscuous mode [ 371.435691][T10798] device veth0_macvtap entered promiscuous mode [ 371.464110][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.494094][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.537569][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.604169][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.975212][T10798] device veth1_macvtap entered promiscuous mode [ 371.976139][ T41] audit: type=1400 audit(1599484525.489:48): avc: denied { associate } for pid=10794 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 372.057982][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.153195][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.180871][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 372.233404][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.291139][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.420501][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.462165][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.536161][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.538347][T10794] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 372.587721][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.662886][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.732698][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.790022][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.868075][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.930418][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.435060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.485518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.596061][T10805] device veth0_macvtap entered promiscuous mode [ 373.693301][T10805] device veth1_macvtap entered promiscuous mode 13:15:27 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000100)="9f1afe5254cfcd47a92d116b72750e1a", 0x10) [ 373.786554][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 373.866766][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.914720][ T41] audit: type=1804 audit(1599484527.389:49): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/1/file0" dev="sda1" ino=16557 res=1 [ 373.930643][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.056488][ T41] audit: type=1804 audit(1599484527.459:50): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/1/file0" dev="sda1" ino=16557 res=1 13:15:27 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 374.127980][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.362201][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 374.417618][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:15:28 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 374.517468][T10805] batman_adv: batadv0: Interface activated: batadv_slave_0 13:15:28 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 374.585135][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 13:15:28 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) readahead(r0, 0x0, 0x0) [ 374.657362][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.704230][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.763892][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 13:15:28 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) readahead(r0, 0x0, 0x0) [ 374.819468][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 374.891301][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.984069][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 375.044245][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.097132][T10805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 375.153029][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.197605][T10805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.239210][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.262430][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:15:29 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) readahead(r0, 0x0, 0x0) 13:15:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:29 executing program 2: r0 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) r1 = socket(0x1, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x2, &(0x7f0000000000)='\x01ridge0\x00\xc7\x15\x96', 0x400000, r1) 13:15:29 executing program 3: unshare(0x28020680) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 13:15:29 executing program 2: pkey_mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = getpid() process_vm_writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/218, 0xda}], 0x1, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/164, 0x20000224}, {&(0x7f0000001480)=""/202, 0xca}], 0x2, 0x0) 13:15:29 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 376.148334][ T41] audit: type=1804 audit(1599484529.669:51): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/8/file0" dev="sda1" ino=16573 res=1 13:15:29 executing program 2: set_mempolicy(0x8003, &(0x7f0000000300)=0xfff, 0x5) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) 13:15:29 executing program 3: unshare(0x28020680) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 13:15:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:29 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x5, 0x4, 0xffffffffffffffff, 0x0, [0x2e]}, 0x40) [ 376.453449][ T41] audit: type=1804 audit(1599484529.979:52): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/9/file0" dev="sda1" ino=16566 res=1 13:15:30 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x1263, 0x0) [ 376.674413][ T41] audit: type=1400 audit(1599484530.039:53): avc: denied { map_create } for pid=10910 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 13:15:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xc, 0x400, 0xc}, 0x40) read(r0, 0x0, 0x0) 13:15:30 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:30 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 376.777762][ T41] audit: type=1400 audit(1599484530.049:54): avc: denied { perfmon } for pid=10910 comm="syz-executor.3" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 13:15:30 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 13:15:30 executing program 1: unshare(0x20000400) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:30 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 376.903973][ T41] audit: type=1400 audit(1599484530.059:55): avc: denied { map_read map_write } for pid=10910 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 13:15:30 executing program 2: set_mempolicy(0x8003, &(0x7f0000000300)=0xfff, 0x5) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) [ 377.074778][ T41] audit: type=1804 audit(1599484530.459:56): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/10/file0" dev="sda1" ino=16567 res=1 13:15:30 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14}, 0xfe48) fcntl$setpipe(r0, 0x407, 0x80005) [ 377.202133][ T41] audit: type=1400 audit(1599484530.569:57): avc: denied { map } for pid=10929 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41684 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 13:15:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000300)) 13:15:30 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:30 executing program 1: unshare(0x20000400) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:31 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 1: unshare(0x20000400) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:31 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 0: syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 0: syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 0: syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 13:15:31 executing program 1: unshare(0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 13:15:31 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 13:15:31 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 1: unshare(0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 1: unshare(0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:31 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:31 executing program 1: unshare(0x20000400) r0 = creat(0x0, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(0x0, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 3: r0 = socket(0x0, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(0x0, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000019380)="0aafa160096f", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 378.934215][ T41] audit: type=1804 audit(1599484532.459:58): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/23/file0" dev="sda1" ino=16593 res=1 13:15:32 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 379.146691][ T41] audit: type=1804 audit(1599484532.669:59): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/24/file0" dev="sda1" ino=16566 res=1 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(0x0, 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 379.279310][ T41] audit: type=1804 audit(1599484532.759:60): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir870371106/syzkaller.wjd4hh/25/file0" dev="sda1" ino=16590 res=1 13:15:32 executing program 3: socket(0x2, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380), 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(0x0, 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:32 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(0x0, 0x0, 0x0) readahead(r0, 0x0, 0x0) 13:15:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa1", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 3: socket(0x2, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa1", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:33 executing program 3: socket(0x2, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}, {{&(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "ba1e4a71649f"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)='q', 0x1}], 0x1}}], 0x2, 0xfc) 13:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa1", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0xfc) 13:15:33 executing program 1: unshare(0x20000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 13:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa16009", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0xfc) 13:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa16009", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0xfc) 13:15:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x19000, &(0x7f0000000380)=""/102400}, &(0x7f0000019380)="0aafa16009", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:15:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@rc={0x2, @fixed}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)="d7", 0x1}], 0x1}}], 0x1, 0xfc) 13:15:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x3f00}}, 0x2e) 13:15:33 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x2a, 0x0, 0x1, 0x0, 0x0, 0x0, @multicast}, 0x10) [ 380.121404][T11208] ------------[ cut here ]------------ [ 380.163598][T11208] WARNING: CPU: 2 PID: 11208 at lib/idr.c:84 idr_alloc+0x11c/0x130 [ 380.281359][T11208] Kernel panic - not syncing: panic_on_warn set ... [ 380.334096][T11208] CPU: 2 PID: 11208 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 380.390246][T11208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 380.390246][T11208] Call Trace: [ 380.390246][T11208] dump_stack+0x18f/0x20d [ 380.390246][T11208] panic+0x2e3/0x75c [ 380.390246][T11208] ? __warn_printk+0xf3/0xf3 [ 380.390246][T11208] ? printk+0xba/0xed [ 380.390246][T11208] ? log_store.cold+0x16/0x16 [ 380.390246][T11208] ? __warn.cold+0x5/0x45 [ 380.390246][T11208] ? idr_alloc+0x11c/0x130 [ 380.390246][T11208] __warn.cold+0x20/0x45 [ 380.390246][T11208] ? idr_alloc+0x11c/0x130 [ 380.390246][T11208] report_bug+0x1bd/0x210 [ 380.390246][T11208] handle_bug+0x38/0x90 [ 380.390246][T11208] exc_invalid_op+0x14/0x40 [ 380.390246][T11208] asm_exc_invalid_op+0x12/0x20 [ 380.390246][T11208] RIP: 0010:idr_alloc+0x11c/0x130 [ 380.390246][T11208] Code: 00 00 00 48 8b 44 24 58 65 48 2b 04 25 28 00 00 00 75 21 48 83 c4 60 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 94 5d c5 fd <0f> 0b 41 bc ea ff ff ff eb b7 e8 15 d6 39 04 0f 1f 44 00 00 41 57 [ 380.390246][T11208] RSP: 0018:ffffc900046c7c88 EFLAGS: 00010212 [ 380.390246][T11208] RAX: 0000000000000da8 RBX: 00000000bbbbbbbc RCX: ffffc9000f539000 [ 380.390246][T11208] RDX: 0000000000040000 RSI: ffffffff83aebf3c RDI: 0000000000000005 [ 380.390246][T11208] RBP: 1ffff920008d8f91 R08: 0000000000000a20 R09: ffff88805993d0c8 [ 380.390246][T11208] R10: 0000000000000000 R11: 1ffffffff183b72c R12: 00000000bbbbbbbb [ 380.390246][T11208] R13: ffffffff8aa70cc0 R14: ffff88802b82c040 R15: 0000000000000a20 [ 380.390246][T11208] ? idr_alloc+0x11c/0x130 [ 380.390246][T11208] ? idr_alloc+0x11c/0x130 [ 380.390246][T11208] ? idr_alloc_u32+0x2d0/0x2d0 [ 380.390246][T11208] ? security_capable+0x8f/0xc0 [ 380.390246][T11208] __qrtr_bind.isra.0+0x12e/0x5c0 [ 380.390246][T11208] ? qrtr_release+0x330/0x330 [ 380.390246][T11208] ? __local_bh_enable_ip+0xd1/0x190 [ 380.390246][T11208] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 380.390246][T11208] ? lock_sock_nested+0x94/0x110 [ 380.390246][T11208] ? trace_hardirqs_on+0x5f/0x220 [ 380.390246][T11208] qrtr_bind+0x1c1/0x250 [ 380.390246][T11208] ? security_socket_bind+0x83/0xb0 [ 380.390246][T11208] __sys_bind+0x1e9/0x250 [ 380.390246][T11208] ? __ia32_sys_socketpair+0xf0/0xf0 [ 380.390246][T11208] ? lock_is_held_type+0xbb/0xf0 [ 380.390246][T11208] ? lock_is_held_type+0xbb/0xf0 [ 380.390246][T11208] ? syscall_enter_from_user_mode+0x20/0x290 [ 380.390246][T11208] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 380.390246][T11208] ? trace_hardirqs_on+0x5f/0x220 [ 380.390246][T11208] __x64_sys_bind+0x6f/0xb0 [ 380.390246][T11208] do_syscall_64+0x2d/0x70 [ 380.390246][T11208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 380.390246][T11208] RIP: 0033:0x45d469 [ 380.390246][T11208] Code: 9d af fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b af fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.390246][T11208] RSP: 002b:00007f18748e5c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 380.390246][T11208] RAX: ffffffffffffffda RBX: 00000000006f1080 RCX: 000000000045d469 [ 380.390246][T11208] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 380.390246][T11208] RBP: 00000000004aa3e7 R08: 0000000000000000 R09: 0000000000000000 [ 380.390246][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075cf00 [ 380.390246][T11208] R13: 00007ffd1ced1c9f R14: 00007f18748c6000 R15: 0000000000000003 [ 380.390246][T11208] Kernel Offset: disabled [ 380.390246][T11208] Rebooting in 86400 seconds..