Warning: Permanently added '[localhost]:15688' (ECDSA) to the list of known hosts. [ 224.357073][ T39] audit: type=1400 audit(1593890501.293:42): avc: denied { map } for pid=10555 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16525 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2020/07/04 19:21:41 fuzzer started 2020/07/04 19:21:43 dialing manager at 10.0.2.10:32807 2020/07/04 19:21:43 syscalls: 3122 2020/07/04 19:21:43 code coverage: enabled 2020/07/04 19:21:43 comparison tracing: enabled 2020/07/04 19:21:43 extra coverage: enabled 2020/07/04 19:21:43 setuid sandbox: enabled 2020/07/04 19:21:43 namespace sandbox: enabled 2020/07/04 19:21:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/04 19:21:43 fault injection: enabled 2020/07/04 19:21:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/04 19:21:43 net packet injection: enabled 2020/07/04 19:21:43 net device setup: enabled 2020/07/04 19:21:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/04 19:21:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/04 19:21:43 USB emulation: enabled [ 226.713832][ T39] audit: type=1400 audit(1593890503.663:43): avc: denied { integrity } for pid=10572 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 19:22:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x46}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) [ 260.903696][ T39] audit: type=1400 audit(1593890537.853:44): avc: denied { map } for pid=10574 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 19:22:18 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 261.772934][T10577] IPVS: ftp: loaded support on port[0] = 21 [ 261.773318][T10576] IPVS: ftp: loaded support on port[0] = 21 19:22:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) [ 262.234796][T10576] chnl_net:caif_netlink_parms(): no params data found [ 262.290560][T10577] chnl_net:caif_netlink_parms(): no params data found [ 262.303438][T10580] IPVS: ftp: loaded support on port[0] = 21 [ 262.347563][T10583] IPVS: ftp: loaded support on port[0] = 21 [ 262.515397][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.530824][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.552158][T10576] device bridge_slave_0 entered promiscuous mode [ 262.575293][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.585757][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.597785][T10577] device bridge_slave_0 entered promiscuous mode [ 262.616947][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.627876][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.639459][T10576] device bridge_slave_1 entered promiscuous mode [ 262.662820][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.673395][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.684909][T10577] device bridge_slave_1 entered promiscuous mode [ 262.711016][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.740717][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.778577][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.813072][T10576] team0: Port device team_slave_0 added [ 262.865199][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.915546][T10576] team0: Port device team_slave_1 added [ 262.980291][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.004331][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.075275][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.134443][T10577] team0: Port device team_slave_0 added [ 263.158694][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.173193][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.233633][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.261724][T10580] chnl_net:caif_netlink_parms(): no params data found [ 263.304831][T10577] team0: Port device team_slave_1 added [ 263.454146][T10576] device hsr_slave_0 entered promiscuous mode [ 263.550750][T10576] device hsr_slave_1 entered promiscuous mode [ 263.602523][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.612473][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.654594][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.685371][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.695561][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.739588][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.834811][T10583] chnl_net:caif_netlink_parms(): no params data found [ 263.884440][T10580] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.898525][T10580] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.913070][T10580] device bridge_slave_0 entered promiscuous mode [ 263.937755][T10580] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.954288][T10580] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.971125][T10580] device bridge_slave_1 entered promiscuous mode [ 264.062882][T10577] device hsr_slave_0 entered promiscuous mode [ 264.140693][T10577] device hsr_slave_1 entered promiscuous mode [ 264.210061][T10577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.230623][T10577] Cannot create hsr debugfs directory [ 264.301221][T10580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.357434][T10580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.427954][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.446991][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.463072][T10583] device bridge_slave_0 entered promiscuous mode [ 264.480160][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.493208][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.504497][T10583] device bridge_slave_1 entered promiscuous mode [ 264.540123][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.563054][T10580] team0: Port device team_slave_0 added [ 264.582441][T10580] team0: Port device team_slave_1 added [ 264.604961][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.703800][T10580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.722929][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.777335][T10580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.801239][T10583] team0: Port device team_slave_0 added [ 264.820833][T10583] team0: Port device team_slave_1 added [ 264.841202][T10580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.853584][T10580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.905824][T10580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.983037][ T39] audit: type=1400 audit(1593890541.933:45): avc: denied { create } for pid=10576 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 264.992357][T10576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.036675][ T39] audit: type=1400 audit(1593890541.933:46): avc: denied { write } for pid=10576 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 265.096507][ T39] audit: type=1400 audit(1593890541.933:47): avc: denied { read } for pid=10576 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 265.157918][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.227572][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.294335][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.401692][T10580] device hsr_slave_0 entered promiscuous mode [ 265.490780][T10580] device hsr_slave_1 entered promiscuous mode [ 265.581533][T10580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.607656][T10580] Cannot create hsr debugfs directory [ 265.640684][T10576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.713920][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.727360][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.775783][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.821734][T10576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.906944][T10576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.174351][T10583] device hsr_slave_0 entered promiscuous mode [ 266.259828][T10583] device hsr_slave_1 entered promiscuous mode [ 266.329568][T10583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.351193][T10583] Cannot create hsr debugfs directory [ 266.378178][T10577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.436916][T10577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.533255][T10577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.632138][T10577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.793118][T10580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.915034][T10580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.998131][T10580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.121667][T10580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.423158][T10583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.513301][T10583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.587418][T10583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.675318][T10583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.774113][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.833500][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.851383][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.868090][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.885556][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.920404][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.933318][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.949758][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.968737][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.001876][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.062402][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.104956][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.140903][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.163334][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.194266][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.220854][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.243118][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.271868][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.298191][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.317896][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.334484][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.368247][T10577] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.394018][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.413220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.481089][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.505122][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.548473][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.582848][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.607154][T10576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.626016][T10580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.641910][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.656853][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.670526][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.683317][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.716880][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.750580][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.772918][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.791688][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.806291][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.825067][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.843613][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.872914][T10580] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.896954][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.913543][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.949421][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.972590][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.987067][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.007188][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.029322][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.045445][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.062785][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.085215][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.106923][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.126294][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.158950][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.192455][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.208011][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.231394][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.254304][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.273662][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.305100][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.335269][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.370910][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.412818][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.452928][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.484290][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.512940][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.554398][T10580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.583744][T10580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.621856][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.644191][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.664733][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.682352][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.700956][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.722361][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.743020][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.762727][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.781034][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.800258][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.821484][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.840619][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.858072][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.884318][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.907187][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.939668][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.961789][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.989086][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.016057][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.044134][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.065315][T10577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.085226][T10576] device veth0_vlan entered promiscuous mode [ 270.422280][T10576] device veth1_vlan entered promiscuous mode [ 270.449088][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.474412][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.510902][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.531709][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.552304][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.574703][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.596050][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.628114][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.643370][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.659351][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.672943][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.699656][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.719592][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.752170][T10580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.790960][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.833807][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.881776][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.900733][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.927597][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.957734][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.992235][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.055806][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.104668][T10583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.142773][T10583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.173199][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.198208][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.220954][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.238604][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.262776][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.281091][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.303485][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.335210][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.360366][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.396946][T10580] device veth0_vlan entered promiscuous mode [ 271.414532][T10576] device veth0_macvtap entered promiscuous mode [ 271.450800][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.473464][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.502482][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.528406][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.668950][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.728497][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.770018][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.834453][T10576] device veth1_macvtap entered promiscuous mode [ 271.862980][T10580] device veth1_vlan entered promiscuous mode [ 271.891471][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.911293][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.933410][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.947903][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.968729][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.992489][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.016126][T10577] device veth0_vlan entered promiscuous mode [ 272.060247][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.084923][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.134061][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.157249][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.186778][T10577] device veth1_vlan entered promiscuous mode [ 272.258568][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.283383][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.298166][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.315432][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.330668][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.400281][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.424144][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.451592][T10580] device veth0_macvtap entered promiscuous mode [ 272.476431][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.658206][T10580] device veth1_macvtap entered promiscuous mode [ 272.862199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.894919][ T39] audit: type=1400 audit(1593890549.833:48): avc: denied { associate } for pid=10576 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 272.934525][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.011894][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.037570][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.114680][T10577] device veth0_macvtap entered promiscuous mode [ 273.145463][T10583] device veth0_vlan entered promiscuous mode [ 273.178356][T10580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.231616][T10580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.267045][T10580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.308430][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.334862][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.363148][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.385660][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.406760][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.432043][T10577] device veth1_macvtap entered promiscuous mode [ 273.433555][T10576] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 273.470831][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.512747][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.574197][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.616624][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.660885][T10577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.733041][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.774360][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.807546][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.908215][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.935899][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.992986][T10580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.035716][T10580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.038167][T10609] input: syz0 as /devices/virtual/input/input5 [ 274.076929][T10580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.155937][T10583] device veth1_vlan entered promiscuous mode [ 274.220447][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.286831][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.364329][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.431067][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.456918][T10609] input: syz0 as /devices/virtual/input/input6 [ 274.482073][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.560004][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.607390][T10577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.666938][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.706206][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:22:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) [ 274.914009][ T39] audit: type=1400 audit(1593890551.853:49): avc: denied { open } for pid=10613 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 274.973315][ T39] audit: type=1400 audit(1593890551.863:50): avc: denied { perfmon } for pid=10613 comm="syz-executor.0" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 275.020617][ T39] audit: type=1400 audit(1593890551.863:51): avc: denied { kernel } for pid=10613 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 275.063008][ T39] audit: type=1400 audit(1593890551.863:52): avc: denied { confidentiality } for pid=10613 comm="syz-executor.0" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 19:22:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40046f41, &(0x7f0000000100)={r4, 0x7000002}) 19:22:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 275.195819][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.217430][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.243406][T10583] device veth0_macvtap entered promiscuous mode [ 275.277404][T10583] device veth1_macvtap entered promiscuous mode 19:22:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 275.421511][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.460843][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.460885][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.460889][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.460901][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.460904][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.464042][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.661243][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 19:22:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) [ 275.680781][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.705660][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.758949][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.850654][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.909621][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.909697][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.909717][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.909721][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.915642][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.144207][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.145203][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:22:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:33 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 19:22:33 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:33 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:33 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:33 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:37 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:37 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:37 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 19:22:37 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:40 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 19:22:40 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x23) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 19:22:41 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:41 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:43 executing program 3: mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:44 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:44 executing program 3: mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:44 executing program 3: mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x9b, 0x32, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 19:22:45 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:45 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:45 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) 19:22:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 19:22:45 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="25a25e64e4af20a373d43a"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:45 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='afs\x00', 0x0, 0x0) 19:22:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0}) [ 288.575391][T10796] kAFS: No cell specified 19:22:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x50, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xad, &(0x7f0000000140)="000000000000003f7be92977f274014b2a089dba8c080f73ccd7468122157cab0b02d46801ba87020bafef3b18473aaa75c20f6a254be6e40633e075eb6417355350141c03e69f21df6999e2b73973487c76b8f0defdcc04cb1a1151bea49c7e2fbf18e3b5946cf2e9dcad9edc679e33fd6845776afdc7de27b23b1acbef8f1dfa75d308fc6ba933a363a8a6ea57e0b6af020b33cf6a194975def46963b56d54d86511b0df20cd39cbf1f5482f"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 288.769583][ C1] traps: PANIC: double fault, error_code: 0x0 [ 288.769583][ C1] double fault: 0000 [#1] PREEMPT SMP KASAN [ 288.769583][ C1] CPU: 1 PID: 10806 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 288.769583][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 288.769583][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 288.769583][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 288.769583][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 288.769583][ C1] RAX: 0000000000000000 RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 288.769583][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 288.769583][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 288.769583][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.769583][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.769583][ C1] FS: 0000000000000000(0003) GS:ffff88802cf00000(0003) knlGS:0000000000000000 [ 288.769583][ C1] CS: 0010 DS: 0003 ES: 0003 CR0: 0000000080050033 [ 288.769583][ C1] CR2: fffffe0000036fa8 CR3: 000000005e58b000 CR4: 0000000000340ee0 [ 288.769583][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.769583][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.769583][ C1] Call Trace: [ 288.769583][ C1] [ 288.769583][ C1] error_entry+0xb8/0xc0 [ 288.769583][ C1] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 288.769583][ C1] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 288.769583][ C1] RSP: 0018:fffffe00000371d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000000 [ 288.769583][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 288.769583][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.769583][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.769583][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.769583][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.769583][ C1] ? asm_exc_general_protection+0x8/0x30 [ 288.769583][ C1] RIP: 0003:0x0 [ 288.769583][ C1] Code: Bad RIP value. [ 288.769583][ C1] RSP: 0003:0000000000000000 EFLAGS: 00000202 [ 288.769583][ C1] Modules linked in: [ 289.920402][ C1] ---[ end trace abc26b5a7f773314 ]--- [ 289.920402][ C1] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 289.920402][ C1] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 289.920402][ C1] RSP: 0018:fffffe0000036fb8 EFLAGS: 00010086 [ 289.920402][ C1] RAX: 0000000000000000 RBX: fffffe0000036fb8 RCX: ffffffff88000e87 [ 289.920402][ C1] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 289.920402][ C1] RBP: fffffe0000037120 R08: 0000000000000000 R09: 0000000000000000 [ 289.920402][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 289.920402][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.920402][ C1] FS: 0000000000000000(0003) GS:ffff88802cf00000(0003) knlGS:0000000000000000 [ 289.920402][ C1] CS: 0010 DS: 0003 ES: 0003 CR0: 0000000080050033 [ 289.920402][ C1] CR2: fffffe0000036fa8 CR3: 000000005e58b000 CR4: 0000000000340ee0 [ 289.920402][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.920402][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.920402][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 289.920402][ C1] Kernel Offset: disabled