Warning: Permanently added '[localhost]:62682' (ECDSA) to the list of known hosts. [ 67.463160][ T38] audit: type=1400 audit(1575362881.149:42): avc: denied { map } for pid=7976 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/12/03 08:48:01 fuzzer started 2019/12/03 08:48:01 dialing manager at 10.0.2.10:34465 2019/12/03 08:48:01 syscalls: 2633 2019/12/03 08:48:01 code coverage: enabled 2019/12/03 08:48:01 comparison tracing: enabled 2019/12/03 08:48:01 extra coverage: extra coverage is not supported by the kernel 2019/12/03 08:48:01 setuid sandbox: enabled 2019/12/03 08:48:01 namespace sandbox: enabled 2019/12/03 08:48:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 08:48:01 fault injection: enabled 2019/12/03 08:48:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 08:48:01 net packet injection: enabled 2019/12/03 08:48:01 net device setup: enabled 2019/12/03 08:48:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 08:48:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:48:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225006000a38e07d4db88a66596759e95307b680ab73e03d53555c97e8e37d01da4d44a994354a9fa3f355214eeabd", 0x49}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 88.552395][ T38] audit: type=1400 audit(1575362902.229:43): avc: denied { map } for pid=8000 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3135 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 08:48:22 executing program 1: [ 88.752075][ T8001] IPVS: ftp: loaded support on port[0] = 21 [ 88.764490][ T8003] IPVS: ftp: loaded support on port[0] = 21 [ 88.870451][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 88.886412][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 88.928522][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.936399][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.945956][ T8001] device bridge_slave_0 entered promiscuous mode [ 88.958320][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.965769][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.975640][ T8001] device bridge_slave_1 entered promiscuous mode [ 88.983733][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.991400][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.999649][ T8003] device bridge_slave_0 entered promiscuous mode [ 89.018429][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.028541][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.037850][ T8003] device bridge_slave_1 entered promiscuous mode [ 89.052074][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.069243][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.080475][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.096731][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.117343][ T8001] team0: Port device team_slave_0 added [ 89.130394][ T8001] team0: Port device team_slave_1 added [ 89.138331][ T8003] team0: Port device team_slave_0 added [ 89.146433][ T8003] team0: Port device team_slave_1 added [ 89.254662][ T8001] device hsr_slave_0 entered promiscuous mode [ 89.312568][ T8001] device hsr_slave_1 entered promiscuous mode [ 89.444610][ T8003] device hsr_slave_0 entered promiscuous mode [ 89.482583][ T8003] device hsr_slave_1 entered promiscuous mode [ 89.552417][ T8003] debugfs: Directory 'hsr0' with parent '/' already present! [ 89.591152][ T38] audit: type=1400 audit(1575362903.269:44): avc: denied { create } for pid=8003 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.615634][ T38] audit: type=1400 audit(1575362903.269:45): avc: denied { write } for pid=8003 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.615650][ T38] audit: type=1400 audit(1575362903.269:46): avc: denied { read } for pid=8003 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 89.667411][ T8003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.715965][ T8001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.834746][ T8001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.904357][ T8003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.944164][ T8003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.024480][ T8001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.084581][ T8003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.144319][ T8001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.253979][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.266340][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.277939][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.286229][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.297093][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.309739][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.317522][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.324946][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.333839][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.342111][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.349568][ T8008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.357585][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.368492][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.381798][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.390645][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.399123][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.406153][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.414210][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.423101][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.431216][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.438447][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.446048][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.455284][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.463719][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.470827][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.480960][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.489440][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.511986][ T8001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.522895][ T8001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.535739][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.544788][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.553690][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.562041][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.570649][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.579381][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.587906][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.596202][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.605151][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.613717][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.622117][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.629975][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.643239][ T2566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.660921][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.670834][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.681781][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.690670][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.699304][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.709646][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.720378][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.735021][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.743967][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.756006][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.763398][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.771981][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.785009][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.786066][ T38] audit: type=1400 audit(1575362904.469:47): avc: denied { associate } for pid=8001 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 90.803397][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.829026][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.836651][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 08:48:24 executing program 1: 08:48:24 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 08:48:24 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x0, 0x4, 0x0, &(0x7f0000002540)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)='sit0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f00000000c0)='tb\n\x1b\x00\x00\x00\x00\x00\x00r\x00') gettid() [ 90.978758][ T38] audit: type=1400 audit(1575362904.659:48): avc: denied { prog_load } for pid=8022 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 91.007773][ T38] audit: type=1400 audit(1575362904.689:49): avc: denied { prog_run } for pid=8022 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:48:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)) [ 91.039313][ T38] audit: type=1400 audit(1575362904.709:50): avc: denied { open } for pid=8022 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 08:48:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) [ 91.067990][ T38] audit: type=1400 audit(1575362904.709:51): avc: denied { kernel } for pid=8022 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 08:48:24 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) pipe(&(0x7f0000001280)) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 91.179377][ T38] audit: type=1400 audit(1575362904.859:52): avc: denied { write } for pid=8022 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 08:48:24 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x0, 0x4, 0x0, &(0x7f0000002540)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)='sit0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f00000000c0)='tb\n\x1b\x00\x00\x00\x00\x00\x00r\x00') gettid() 08:48:25 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x0, 0x4, 0x0, &(0x7f0000002540)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)='sit0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f00000000c0)='tb\n\x1b\x00\x00\x00\x00\x00\x00r\x00') gettid() 08:48:25 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x0, 0x4, 0x0, &(0x7f0000002540)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)='sit0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f00000000c0)='tb\n\x1b\x00\x00\x00\x00\x00\x00r\x00') gettid() 08:48:25 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) epoll_create(0x0) eventfd2(0x0, 0x2) open$dir(0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:48:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) pipe(&(0x7f0000001280)) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 08:48:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r3 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) write$P9_RCREATE(r3, &(0x7f0000000040)={0x18}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) dup2(r3, r4) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x204, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x44810}, 0x4) socket(0x10, 0x803, 0x0) [ 92.552252][ C0] hrtimer: interrupt took 23084 ns [ 163.008595][ C0] ------------[ cut here ]------------ [ 166.592258][ C0] NETDEV WATCHDOG: eth0 (e1000): transmit queue 0 timed out [ 167.306857][ C0] WARNING: CPU: 0 PID: 8061 at net/sched/sch_generic.c:442 dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 167.312227][ C0] CPU: 0 PID: 8061 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 167.312227][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 167.312227][ C0] Call Trace: [ 167.312227][ C0] [ 167.312227][ C0] dump_stack+0x197/0x210 [ 167.312227][ C0] ? dev_watchdog+0xae0/0xca0 [ 167.312227][ C0] panic+0x2e3/0x75c [ 167.312227][ C0] ? add_taint.cold+0x16/0x16 [ 167.312227][ C0] ? __kasan_check_write+0x14/0x20 [ 167.312227][ C0] ? __warn.cold+0x14/0x3e [ 167.312227][ C0] ? __warn+0xd9/0x1cf [ 167.312227][ C0] ? dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] __warn.cold+0x2f/0x3e [ 167.312227][ C0] ? dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] report_bug+0x289/0x300 [ 167.312227][ C0] do_error_trap+0x11b/0x200 [ 167.312227][ C0] do_invalid_op+0x37/0x50 [ 167.312227][ C0] ? dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] invalid_op+0x23/0x30 [ 167.312227][ C0] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] Code: ff e8 8f 09 48 fb 4c 89 e7 c6 05 9b e3 26 04 01 e8 00 31 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 00 34 d7 88 48 89 c2 e8 ea b3 18 fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 db 79 85 fb e9 7d f8 ff ff 48 [ 167.312227][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00010286 [ 167.312227][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 167.312227][ C0] RDX: 0000000000000100 RSI: ffffffff815e5a26 RDI: fffff52000000f85 [ 167.312227][ C0] RBP: ffffc90000007d00 R08: ffff888021394140 R09: ffffed1005a46621 [ 167.312227][ C0] R10: ffffed1005a46620 R11: ffff88802d233107 R12: ffff888027b6c000 [ 167.312227][ C0] R13: 0000000000000000 R14: ffff888027b6c4f8 R15: ffffffffffffe721 [ 167.312227][ C0] ? vprintk_func+0x86/0x189 [ 167.312227][ C0] ? dev_watchdog+0xaf5/0xca0 [ 167.312227][ C0] call_timer_fn+0x1ac/0x780 [ 167.312227][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 167.312227][ C0] ? msleep_interruptible+0x150/0x150 [ 167.491304][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 167.491304][ C0] ? trace_hardirqs_on+0x67/0x240 [ 167.491304][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 167.491304][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 167.491304][ C0] run_timer_softirq+0x6c3/0x1790 [ 167.491304][ C0] ? add_timer+0x930/0x930 [ 167.491304][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 167.491304][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 167.491304][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 167.491304][ C0] __do_softirq+0x262/0x98c [ 167.491304][ C0] ? sched_clock_cpu+0x14e/0x1b0 [ 167.491304][ C0] irq_exit+0x19b/0x1e0 [ 167.491304][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 167.491304][ C0] apic_timer_interrupt+0xf/0x20 [ 167.491304][ C0] [ 167.491304][ C0] RIP: 0010:generic_exec_single+0x33a/0x4c0 [ 167.491304][ C0] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 68 01 00 00 48 83 3d de 62 09 08 00 0f 84 e0 00 00 00 e8 bb 27 0b 00 48 89 df 57 9d <0f> 1f 44 00 00 45 31 ed e9 39 fe ff ff e8 a4 27 0b 00 0f 0b e9 23 [ 167.491304][ C0] RSP: 0018:ffffc90000ea7a80 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 [ 167.491304][ C0] RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc9000397a000 [ 167.491304][ C0] RDX: 000000000000129c RSI: ffffffff8169d2c5 RDI: 0000000000000216 [ 167.491304][ C0] RBP: ffffc90000ea7ab0 R08: 1ffffffff16161b8 R09: fffffbfff16161b9 [ 167.491304][ C0] R10: fffffbfff16161b8 R11: ffffffff8b0b0dc7 R12: 0000000000000200 [ 167.491304][ C0] R13: ffffc90000ea7b00 R14: ffffc90000ea7bd0 R15: ffffffff818beee0 [ 167.491304][ C0] ? perf_duration_warn+0x40/0x40 [ 167.491304][ C0] ? generic_exec_single+0x335/0x4c0 [ 167.491304][ C0] ? __perf_event_enable+0x930/0x930 [ 167.491304][ C0] smp_call_function_single+0x17c/0x480 [ 167.491304][ C0] ? perf_duration_warn+0x40/0x40 [ 167.491304][ C0] ? generic_exec_single+0x4c0/0x4c0 [ 167.491304][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 167.491304][ C0] ? __perf_event_enable+0x930/0x930 [ 167.491304][ C0] task_function_call+0xe9/0x180 [ 167.491304][ C0] ? perf_event_addr_filters_exec+0x310/0x310 [ 167.491304][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 167.491304][ C0] ? __perf_event_enable+0x930/0x930 [ 167.491304][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.491304][ C0] ? exclusive_event_installable+0x257/0x320 [ 167.491304][ C0] perf_install_in_context+0x308/0x5a0 [ 167.491304][ C0] ? list_add_event+0xed0/0xed0 [ 167.491304][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.491304][ C0] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 167.491304][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.491304][ C0] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 167.491304][ C0] ? perf_event_set_output+0x4e0/0x4e0 [ 167.491304][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.491304][ C0] ? put_timespec64+0xda/0x140 [ 167.491304][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 167.491304][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 167.491304][ C0] ? do_syscall_64+0x26/0x790 [ 167.491304][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.491304][ C0] ? do_syscall_64+0x26/0x790 [ 167.491304][ C0] __x64_sys_perf_event_open+0xbe/0x150 [ 167.491304][ C0] do_syscall_64+0xfa/0x790 [ 167.491304][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.491304][ C0] RIP: 0033:0x45a759 [ 167.491304][ C0] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.491304][ C0] RSP: 002b:00007fa1443afc88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 167.491304][ C0] RAX: ffffffffffffffda RBX: 000000000072bf00 RCX: 000000000045a759 [ 167.491304][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 167.491304][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 167.491304][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa1443b06d4 [ 167.491304][ C0] R13: 00000000004af4bf R14: 00000000006f3b98 R15: 00000000ffffffff [ 167.491304][ C0] ------------[ cut here ]------------ [ 167.491304][ C0] WARNING: CPU: 0 PID: 8061 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 167.491304][ C0] Modules linked in: [ 167.491304][ C0] CPU: 0 PID: 8061 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 167.491304][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 167.491304][ C0] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 167.491304][ C0] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 ac 32 99 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 e0 e4 41 8b 48 89 4d d0 e8 e0 be f0 [ 167.491304][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00010006 [ 167.491304][ C0] RAX: 0000000000000103 RBX: 1ffff92000000f13 RCX: 0000000000000004 [ 167.491304][ C0] RDX: 0000000000000100 RSI: ffffffff816be955 RDI: ffffffff897c27a0 [ 167.491304][ C0] RBP: ffffc90000007888 R08: 0000000000000001 R09: fffffbfff12f3855 [ 167.491304][ C0] R10: fffffbfff12f3854 R11: ffffffff8979c2a3 R12: ffffffff8b41e4e0 [ 167.491304][ C0] R13: 0000000000000000 R14: ffffffff862cf100 R15: ffffffff897c27a0 [ 167.491304][ C0] FS: 00007fa1443b0700(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 167.491304][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.491304][ C0] CR2: 0000000020001280 CR3: 0000000029896000 CR4: 00000000003406f0 [ 167.491304][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.491304][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.491304][ C0] Call Trace: [ 167.491304][ C0] [ 167.491304][ C0] ? dev_watchdog+0xae0/0xca0 [ 167.491304][ C0] __crash_kexec+0x91/0x200 [ 167.491304][ C0] ? kexec_crash_loaded+0x20/0x20 [ 167.491304][ C0] ? trace_hardirqs_off+0x62/0x240 [ 167.491304][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 168.020446][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 168.020446][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 168.020446][ C0] ? find_next_bit+0x107/0x130 [ 168.020446][ C0] ? cpumask_next+0x41/0x50 [ 168.020446][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 168.020446][ C0] ? printk_safe_flush+0xf2/0x140 [ 168.020446][ C0] ? dev_watchdog+0xae0/0xca0 [ 168.020446][ C0] panic+0x308/0x75c [ 168.020446][ C0] ? add_taint.cold+0x16/0x16 [ 168.020446][ C0] ? __kasan_check_write+0x14/0x20 [ 168.020446][ C0] ? __warn.cold+0x14/0x3e [ 168.020446][ C0] ? __warn+0xd9/0x1cf [ 168.020446][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.020446][ C0] __warn.cold+0x2f/0x3e [ 168.020446][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.020446][ C0] report_bug+0x289/0x300 [ 168.020446][ C0] do_error_trap+0x11b/0x200 [ 168.020446][ C0] do_invalid_op+0x37/0x50 [ 168.020446][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.020446][ C0] invalid_op+0x23/0x30 [ 168.020446][ C0] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 168.020446][ C0] Code: ff e8 8f 09 48 fb 4c 89 e7 c6 05 9b e3 26 04 01 e8 00 31 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 00 34 d7 88 48 89 c2 e8 ea b3 18 fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 db 79 85 fb e9 7d f8 ff ff 48 [ 168.020446][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00010286 [ 168.020446][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 168.020446][ C0] RDX: 0000000000000100 RSI: ffffffff815e5a26 RDI: fffff52000000f85 [ 168.020446][ C0] RBP: ffffc90000007d00 R08: ffff888021394140 R09: ffffed1005a46621 [ 168.020446][ C0] R10: ffffed1005a46620 R11: ffff88802d233107 R12: ffff888027b6c000 [ 168.020446][ C0] R13: 0000000000000000 R14: ffff888027b6c4f8 R15: ffffffffffffe721 [ 168.020446][ C0] ? vprintk_func+0x86/0x189 [ 168.020446][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.020446][ C0] call_timer_fn+0x1ac/0x780 [ 168.020446][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.020446][ C0] ? msleep_interruptible+0x150/0x150 [ 168.020446][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 168.020446][ C0] ? trace_hardirqs_on+0x67/0x240 [ 168.020446][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.020446][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.020446][ C0] run_timer_softirq+0x6c3/0x1790 [ 168.020446][ C0] ? add_timer+0x930/0x930 [ 168.020446][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 168.020446][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 168.020446][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 168.020446][ C0] __do_softirq+0x262/0x98c [ 168.020446][ C0] ? sched_clock_cpu+0x14e/0x1b0 [ 168.020446][ C0] irq_exit+0x19b/0x1e0 [ 168.020446][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 168.020446][ C0] apic_timer_interrupt+0xf/0x20 [ 168.020446][ C0] [ 168.020446][ C0] RIP: 0010:generic_exec_single+0x33a/0x4c0 [ 168.020446][ C0] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 68 01 00 00 48 83 3d de 62 09 08 00 0f 84 e0 00 00 00 e8 bb 27 0b 00 48 89 df 57 9d <0f> 1f 44 00 00 45 31 ed e9 39 fe ff ff e8 a4 27 0b 00 0f 0b e9 23 [ 168.020446][ C0] RSP: 0018:ffffc90000ea7a80 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 [ 168.020446][ C0] RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc9000397a000 [ 168.020446][ C0] RDX: 000000000000129c RSI: ffffffff8169d2c5 RDI: 0000000000000216 [ 168.020446][ C0] RBP: ffffc90000ea7ab0 R08: 1ffffffff16161b8 R09: fffffbfff16161b9 [ 168.020446][ C0] R10: fffffbfff16161b8 R11: ffffffff8b0b0dc7 R12: 0000000000000200 [ 168.020446][ C0] R13: ffffc90000ea7b00 R14: ffffc90000ea7bd0 R15: ffffffff818beee0 [ 168.020446][ C0] ? perf_duration_warn+0x40/0x40 [ 168.020446][ C0] ? generic_exec_single+0x335/0x4c0 [ 168.020446][ C0] ? __perf_event_enable+0x930/0x930 [ 168.020446][ C0] smp_call_function_single+0x17c/0x480 [ 168.020446][ C0] ? perf_duration_warn+0x40/0x40 [ 168.020446][ C0] ? generic_exec_single+0x4c0/0x4c0 [ 168.020446][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 168.020446][ C0] ? __perf_event_enable+0x930/0x930 [ 168.020446][ C0] task_function_call+0xe9/0x180 [ 168.020446][ C0] ? perf_event_addr_filters_exec+0x310/0x310 [ 168.020446][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 168.020446][ C0] ? __perf_event_enable+0x930/0x930 [ 168.020446][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.020446][ C0] ? exclusive_event_installable+0x257/0x320 [ 168.020446][ C0] perf_install_in_context+0x308/0x5a0 [ 168.020446][ C0] ? list_add_event+0xed0/0xed0 [ 168.020446][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.020446][ C0] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 168.020446][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.020446][ C0] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 168.020446][ C0] ? perf_event_set_output+0x4e0/0x4e0 [ 168.020446][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.020446][ C0] ? put_timespec64+0xda/0x140 [ 168.020446][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 168.020446][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 168.020446][ C0] ? do_syscall_64+0x26/0x790 [ 168.020446][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.020446][ C0] ? do_syscall_64+0x26/0x790 [ 168.020446][ C0] __x64_sys_perf_event_open+0xbe/0x150 [ 168.020446][ C0] do_syscall_64+0xfa/0x790 [ 168.020446][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.491117][ C0] RIP: 0033:0x45a759 [ 168.491117][ C0] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.491117][ C0] RSP: 002b:00007fa1443afc88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 168.491117][ C0] RAX: ffffffffffffffda RBX: 000000000072bf00 RCX: 000000000045a759 [ 168.491117][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 168.491117][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 168.491117][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa1443b06d4 [ 168.491117][ C0] R13: 00000000004af4bf R14: 00000000006f3b98 R15: 00000000ffffffff [ 168.491117][ C0] irq event stamp: 2722971 [ 168.491117][ C0] hardirqs last enabled at (2722970): [] trace_hardirqs_on_thunk+0x1a/0x1c [ 168.491117][ C0] hardirqs last disabled at (2722971): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 168.491117][ C0] softirqs last enabled at (362): [] sctp_init_sock+0xed2/0x1450 [ 168.581665][ C0] softirqs last disabled at (605): [] irq_exit+0x19b/0x1e0 [ 168.581665][ C0] ---[ end trace 1a7cb5e7e43d5cf6 ]--- [ 168.581665][ C0] ------------[ cut here ]------------ [ 168.581665][ C0] WARNING: CPU: 0 PID: 8061 at kernel/locking/mutex.c:737 mutex_unlock+0x1d/0x30 [ 168.581665][ C0] Modules linked in: [ 168.581665][ C0] CPU: 0 PID: 8061 Comm: syz-executor.0 Tainted: G W 5.4.0-syzkaller #0 [ 168.581665][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 168.581665][ C0] RIP: 0010:mutex_unlock+0x1d/0x30 [ 168.581665][ C0] Code: 4c 89 ff e8 35 ca f0 f9 e9 8c fb ff ff 55 65 8b 05 b0 7d 40 78 a9 00 ff 1f 00 48 89 e5 75 0b 48 8b 75 08 e8 45 f9 ff ff 5d c3 <0f> 0b 48 8b 75 08 e8 38 f9 ff ff 5d c3 66 0f 1f 44 00 00 48 b8 00 [ 168.581665][ C0] RSP: 0018:ffffc90000007888 EFLAGS: 00010006 [ 168.581665][ C0] RAX: 0000000000000103 RBX: 1ffff92000000f13 RCX: ffffffff816be96d [ 168.581665][ C0] RDX: 0000000000000100 RSI: ffffffff816be9cf RDI: ffffffff897c27a0 [ 168.581665][ C0] RBP: ffffc90000007888 R08: ffff888021394140 R09: fffffbfff16161ba [ 168.581665][ C0] R10: ffff888021394a78 R11: ffff888021394140 R12: 0000000000000001 [ 168.581665][ C0] R13: 0000000000000000 R14: ffffffff862cf100 R15: 00000000000001ba [ 168.581665][ C0] FS: 00007fa1443b0700(0000) GS:ffff88802d200000(0000) knlGS:0000000000000000 [ 168.581665][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.581665][ C0] CR2: 0000000020001280 CR3: 0000000029896000 CR4: 00000000003406f0 [ 168.581665][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.581665][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.581665][ C0] Call Trace: [ 168.581665][ C0] [ 168.581665][ C0] __crash_kexec+0x10b/0x200 [ 168.581665][ C0] ? kexec_crash_loaded+0x20/0x20 [ 168.581665][ C0] ? trace_hardirqs_off+0x62/0x240 [ 168.581665][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 168.581665][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 168.581665][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 168.581665][ C0] ? find_next_bit+0x107/0x130 [ 168.581665][ C0] ? cpumask_next+0x41/0x50 [ 168.581665][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 168.581665][ C0] ? printk_safe_flush+0xf2/0x140 [ 168.581665][ C0] ? dev_watchdog+0xae0/0xca0 [ 168.581665][ C0] panic+0x308/0x75c [ 168.581665][ C0] ? add_taint.cold+0x16/0x16 [ 168.581665][ C0] ? __kasan_check_write+0x14/0x20 [ 168.581665][ C0] ? __warn.cold+0x14/0x3e [ 168.581665][ C0] ? __warn+0xd9/0x1cf [ 168.581665][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.581665][ C0] __warn.cold+0x2f/0x3e [ 168.581665][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.581665][ C0] report_bug+0x289/0x300 [ 168.581665][ C0] do_error_trap+0x11b/0x200 [ 168.581665][ C0] do_invalid_op+0x37/0x50 [ 168.581665][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.581665][ C0] invalid_op+0x23/0x30 [ 168.581665][ C0] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 168.581665][ C0] Code: ff e8 8f 09 48 fb 4c 89 e7 c6 05 9b e3 26 04 01 e8 00 31 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 00 34 d7 88 48 89 c2 e8 ea b3 18 fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 db 79 85 fb e9 7d f8 ff ff 48 [ 168.581665][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00010286 [ 168.581665][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 168.581665][ C0] RDX: 0000000000000100 RSI: ffffffff815e5a26 RDI: fffff52000000f85 [ 168.581665][ C0] RBP: ffffc90000007d00 R08: ffff888021394140 R09: ffffed1005a46621 [ 168.581665][ C0] R10: ffffed1005a46620 R11: ffff88802d233107 R12: ffff888027b6c000 [ 168.581665][ C0] R13: 0000000000000000 R14: ffff888027b6c4f8 R15: ffffffffffffe721 [ 168.581665][ C0] ? vprintk_func+0x86/0x189 [ 168.581665][ C0] ? dev_watchdog+0xaf5/0xca0 [ 168.581665][ C0] call_timer_fn+0x1ac/0x780 [ 168.581665][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.581665][ C0] ? msleep_interruptible+0x150/0x150 [ 168.581665][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 168.581665][ C0] ? trace_hardirqs_on+0x67/0x240 [ 168.581665][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.581665][ C0] ? pfifo_fast_reset+0x5b0/0x5b0 [ 168.581665][ C0] run_timer_softirq+0x6c3/0x1790 [ 168.581665][ C0] ? add_timer+0x930/0x930 [ 168.581665][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 168.581665][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 168.581665][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 168.581665][ C0] __do_softirq+0x262/0x98c [ 168.581665][ C0] ? sched_clock_cpu+0x14e/0x1b0 [ 168.581665][ C0] irq_exit+0x19b/0x1e0 [ 168.581665][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 169.020494][ C0] apic_timer_interrupt+0xf/0x20 [ 169.020494][ C0] [ 169.020494][ C0] RIP: 0010:generic_exec_single+0x33a/0x4c0 [ 169.020494][ C0] Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 68 01 00 00 48 83 3d de 62 09 08 00 0f 84 e0 00 00 00 e8 bb 27 0b 00 48 89 df 57 9d <0f> 1f 44 00 00 45 31 ed e9 39 fe ff ff e8 a4 27 0b 00 0f 0b e9 23 [ 169.020494][ C0] RSP: 0018:ffffc90000ea7a80 EFLAGS: 00000216 ORIG_RAX: ffffffffffffff13 [ 169.020494][ C0] RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc9000397a000 [ 169.020494][ C0] RDX: 000000000000129c RSI: ffffffff8169d2c5 RDI: 0000000000000216 [ 169.020494][ C0] RBP: ffffc90000ea7ab0 R08: 1ffffffff16161b8 R09: fffffbfff16161b9 [ 169.020494][ C0] R10: fffffbfff16161b8 R11: ffffffff8b0b0dc7 R12: 0000000000000200 [ 169.020494][ C0] R13: ffffc90000ea7b00 R14: ffffc90000ea7bd0 R15: ffffffff818beee0 [ 169.020494][ C0] ? perf_duration_warn+0x40/0x40 [ 169.020494][ C0] ? generic_exec_single+0x335/0x4c0 [ 169.020494][ C0] ? __perf_event_enable+0x930/0x930 [ 169.020494][ C0] smp_call_function_single+0x17c/0x480 [ 169.020494][ C0] ? perf_duration_warn+0x40/0x40 [ 169.020494][ C0] ? generic_exec_single+0x4c0/0x4c0 [ 169.020494][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 169.020494][ C0] ? __perf_event_enable+0x930/0x930 [ 169.020494][ C0] task_function_call+0xe9/0x180 [ 169.020494][ C0] ? perf_event_addr_filters_exec+0x310/0x310 [ 169.020494][ C0] ? __do_sys_perf_event_open+0x174c/0x2c70 [ 169.020494][ C0] ? __perf_event_enable+0x930/0x930 [ 169.020494][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.020494][ C0] ? exclusive_event_installable+0x257/0x320 [ 169.020494][ C0] perf_install_in_context+0x308/0x5a0 [ 169.020494][ C0] ? list_add_event+0xed0/0xed0 [ 169.020494][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.020494][ C0] ? __perf_event_header_size.isra.0+0x166/0x1c0 [ 169.020494][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.020494][ C0] __do_sys_perf_event_open+0x1cbc/0x2c70 [ 169.020494][ C0] ? perf_event_set_output+0x4e0/0x4e0 [ 169.020494][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.020494][ C0] ? put_timespec64+0xda/0x140 [ 169.020494][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 169.020494][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 169.020494][ C0] ? do_syscall_64+0x26/0x790 [ 169.020494][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.020494][ C0] ? do_syscall_64+0x26/0x790 [ 169.020494][ C0] __x64_sys_perf_event_open+0xbe/0x150 [ 169.020494][ C0] do_syscall_64+0xfa/0x790 [ 169.020494][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.020494][ C0] RIP: 0033:0x45a759 [ 169.020494][ C0] Code: bd b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b b1 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.020494][ C0] RSP: 002b:00007fa1443afc88 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 169.020494][ C0] RAX: ffffffffffffffda RBX: 000000000072bf00 RCX: 000000000045a759 [ 169.020494][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 169.020494][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 169.020494][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa1443b06d4 [ 169.020494][ C0] R13: 00000000004af4bf R14: 00000000006f3b98 R15: 00000000ffffffff [ 169.020494][ C0] irq event stamp: 2722971 [ 169.020494][ C0] hardirqs last enabled at (2722970): [] trace_hardirqs_on_thunk+0x1a/0x1c [ 169.020494][ C0] hardirqs last disabled at (2722971): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 169.020494][ C0] softirqs last enabled at (362): [] sctp_init_sock+0xed2/0x1450 [ 169.020494][ C0] softirqs last disabled at (605): [] irq_exit+0x19b/0x1e0 [ 169.020494][ C0] ---[ end trace 1a7cb5e7e43d5cf7 ]--- [ 169.020494][ C0] Kernel Offset: disabled [ 169.020494][ C0] Rebooting in 86400 seconds..