Warning: Permanently added '[localhost]:58419' (ECDSA) to the list of known hosts. 2021/02/26 10:06:59 fuzzer started 2021/02/26 10:07:00 dialing manager at localhost:43625 2021/02/26 10:07:02 syscalls: 3622 2021/02/26 10:07:02 code coverage: enabled 2021/02/26 10:07:02 comparison tracing: enabled 2021/02/26 10:07:02 extra coverage: enabled 2021/02/26 10:07:02 setuid sandbox: enabled 2021/02/26 10:07:02 namespace sandbox: enabled 2021/02/26 10:07:02 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/26 10:07:02 fault injection: enabled 2021/02/26 10:07:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/26 10:07:02 net packet injection: enabled 2021/02/26 10:07:02 net device setup: enabled 2021/02/26 10:07:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/02/26 10:07:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/26 10:07:02 USB emulation: enabled 2021/02/26 10:07:02 hci packet injection: enabled 2021/02/26 10:07:02 wifi device emulation: enabled 2021/02/26 10:07:02 802.15.4 emulation: enabled 2021/02/26 10:07:02 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/26 10:07:02 fetching corpus: 50, signal 41408/44805 (executing program) 2021/02/26 10:07:03 fetching corpus: 100, signal 53315/58148 (executing program) syzkaller login: [ 108.805756][ T3370] ieee802154 phy0 wpan0: encryption failed: -22 2021/02/26 10:07:03 fetching corpus: 145, signal 65371/71441 (executing program) [ 108.814735][ T3370] ieee802154 phy1 wpan1: encryption failed: -22 2021/02/26 10:07:03 fetching corpus: 193, signal 76818/83976 (executing program) 2021/02/26 10:07:03 fetching corpus: 241, signal 85204/93453 (executing program) 2021/02/26 10:07:04 fetching corpus: 289, signal 91488/100774 (executing program) 2021/02/26 10:07:04 fetching corpus: 335, signal 99928/110007 (executing program) 2021/02/26 10:07:04 fetching corpus: 382, signal 107603/118445 (executing program) 2021/02/26 10:07:05 fetching corpus: 432, signal 113216/124831 (executing program) 2021/02/26 10:07:05 fetching corpus: 481, signal 117549/129962 (executing program) 2021/02/26 10:07:05 fetching corpus: 529, signal 123331/136352 (executing program) 2021/02/26 10:07:06 fetching corpus: 576, signal 128004/141662 (executing program) 2021/02/26 10:07:06 fetching corpus: 626, signal 134441/148446 (executing program) 2021/02/26 10:07:06 fetching corpus: 675, signal 138193/152824 (executing program) 2021/02/26 10:07:07 fetching corpus: 723, signal 140840/156139 (executing program) 2021/02/26 10:07:07 fetching corpus: 772, signal 144309/160110 (executing program) 2021/02/26 10:07:07 fetching corpus: 822, signal 147190/163572 (executing program) 2021/02/26 10:07:07 fetching corpus: 872, signal 150870/167643 (executing program) 2021/02/26 10:07:08 fetching corpus: 922, signal 154611/171688 (executing program) 2021/02/26 10:07:08 fetching corpus: 971, signal 158126/175539 (executing program) 2021/02/26 10:07:08 fetching corpus: 1021, signal 160341/178203 (executing program) 2021/02/26 10:07:08 fetching corpus: 1070, signal 163252/181433 (executing program) 2021/02/26 10:07:09 fetching corpus: 1120, signal 168444/186452 (executing program) 2021/02/26 10:07:09 fetching corpus: 1166, signal 171461/189603 (executing program) 2021/02/26 10:07:09 fetching corpus: 1216, signal 173599/192072 (executing program) 2021/02/26 10:07:10 fetching corpus: 1265, signal 176629/195247 (executing program) 2021/02/26 10:07:10 fetching corpus: 1313, signal 180238/198833 (executing program) 2021/02/26 10:07:10 fetching corpus: 1361, signal 181914/200878 (executing program) 2021/02/26 10:07:11 fetching corpus: 1411, signal 187614/205975 (executing program) 2021/02/26 10:07:12 fetching corpus: 1460, signal 189614/208122 (executing program) 2021/02/26 10:07:12 fetching corpus: 1508, signal 191151/209979 (executing program) 2021/02/26 10:07:12 fetching corpus: 1557, signal 193488/212295 (executing program) 2021/02/26 10:07:13 fetching corpus: 1606, signal 195604/214478 (executing program) 2021/02/26 10:07:13 fetching corpus: 1654, signal 197387/216401 (executing program) 2021/02/26 10:07:13 fetching corpus: 1704, signal 198854/217979 (executing program) 2021/02/26 10:07:13 fetching corpus: 1754, signal 200678/219823 (executing program) 2021/02/26 10:07:13 fetching corpus: 1804, signal 202985/222059 (executing program) 2021/02/26 10:07:14 fetching corpus: 1854, signal 204701/223768 (executing program) 2021/02/26 10:07:14 fetching corpus: 1903, signal 206276/225389 (executing program) 2021/02/26 10:07:14 fetching corpus: 1953, signal 208542/227491 (executing program) 2021/02/26 10:07:14 fetching corpus: 2003, signal 210028/229007 (executing program) 2021/02/26 10:07:14 fetching corpus: 2053, signal 211828/230688 (executing program) 2021/02/26 10:07:15 fetching corpus: 2102, signal 213406/232232 (executing program) 2021/02/26 10:07:15 fetching corpus: 2151, signal 215268/233879 (executing program) 2021/02/26 10:07:15 fetching corpus: 2199, signal 217378/235657 (executing program) 2021/02/26 10:07:15 fetching corpus: 2249, signal 218943/237088 (executing program) 2021/02/26 10:07:15 fetching corpus: 2299, signal 220274/238309 (executing program) 2021/02/26 10:07:16 fetching corpus: 2349, signal 222248/239914 (executing program) 2021/02/26 10:07:16 fetching corpus: 2399, signal 223866/241279 (executing program) 2021/02/26 10:07:16 fetching corpus: 2449, signal 225296/242528 (executing program) 2021/02/26 10:07:16 fetching corpus: 2498, signal 226344/243509 (executing program) 2021/02/26 10:07:16 fetching corpus: 2548, signal 228272/245005 (executing program) 2021/02/26 10:07:17 fetching corpus: 2597, signal 229681/246165 (executing program) 2021/02/26 10:07:17 fetching corpus: 2647, signal 230933/247236 (executing program) 2021/02/26 10:07:17 fetching corpus: 2697, signal 232755/248597 (executing program) 2021/02/26 10:07:17 fetching corpus: 2747, signal 233898/249520 (executing program) 2021/02/26 10:07:18 fetching corpus: 2797, signal 235090/250447 (executing program) 2021/02/26 10:07:18 fetching corpus: 2847, signal 236703/251596 (executing program) 2021/02/26 10:07:18 fetching corpus: 2897, signal 238066/252609 (executing program) 2021/02/26 10:07:18 fetching corpus: 2947, signal 239490/253661 (executing program) 2021/02/26 10:07:19 fetching corpus: 2997, signal 240823/254642 (executing program) 2021/02/26 10:07:19 fetching corpus: 3047, signal 242184/255571 (executing program) 2021/02/26 10:07:19 fetching corpus: 3097, signal 244504/257016 (executing program) 2021/02/26 10:07:19 fetching corpus: 3147, signal 245734/257850 (executing program) 2021/02/26 10:07:19 fetching corpus: 3197, signal 246982/258679 (executing program) 2021/02/26 10:07:19 fetching corpus: 3247, signal 248626/259678 (executing program) 2021/02/26 10:07:20 fetching corpus: 3297, signal 249826/260445 (executing program) 2021/02/26 10:07:20 fetching corpus: 3347, signal 251312/261338 (executing program) 2021/02/26 10:07:20 fetching corpus: 3397, signal 252874/262236 (executing program) 2021/02/26 10:07:21 fetching corpus: 3445, signal 253975/262941 (executing program) 2021/02/26 10:07:21 fetching corpus: 3493, signal 255361/263703 (executing program) 2021/02/26 10:07:21 fetching corpus: 3542, signal 256128/264214 (executing program) 2021/02/26 10:07:21 fetching corpus: 3592, signal 257448/264947 (executing program) 2021/02/26 10:07:22 fetching corpus: 3642, signal 258488/265521 (executing program) 2021/02/26 10:07:22 fetching corpus: 3692, signal 259347/266004 (executing program) 2021/02/26 10:07:22 fetching corpus: 3742, signal 260569/266731 (executing program) 2021/02/26 10:07:22 fetching corpus: 3791, signal 261898/267377 (executing program) 2021/02/26 10:07:23 fetching corpus: 3841, signal 262885/267865 (executing program) 2021/02/26 10:07:23 fetching corpus: 3891, signal 264419/268617 (executing program) 2021/02/26 10:07:23 fetching corpus: 3941, signal 265418/269056 (executing program) 2021/02/26 10:07:23 fetching corpus: 3991, signal 267069/269787 (executing program) 2021/02/26 10:07:24 fetching corpus: 4041, signal 267867/270130 (executing program) 2021/02/26 10:07:24 fetching corpus: 4082, signal 268582/270414 (executing program) 2021/02/26 10:07:24 fetching corpus: 4083, signal 268613/270467 (executing program) 2021/02/26 10:07:24 fetching corpus: 4083, signal 268613/270483 (executing program) 2021/02/26 10:07:24 fetching corpus: 4083, signal 268613/270508 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270548 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270576 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270592 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270614 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270628 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270654 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270677 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270702 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270728 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270750 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270770 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270801 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270833 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270857 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270880 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270897 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270921 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270946 (executing program) 2021/02/26 10:07:24 fetching corpus: 4084, signal 268632/270971 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271007 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271033 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271048 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271076 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271105 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271115 (executing program) 2021/02/26 10:07:24 fetching corpus: 4085, signal 268664/271135 (executing program) 2021/02/26 10:07:24 fetching corpus: 4086, signal 268666/271153 (executing program) 2021/02/26 10:07:24 fetching corpus: 4086, signal 268666/271171 (executing program) 2021/02/26 10:07:24 fetching corpus: 4086, signal 268666/271195 (executing program) 2021/02/26 10:07:24 fetching corpus: 4088, signal 268795/271335 (executing program) 2021/02/26 10:07:24 fetching corpus: 4088, signal 268795/271354 (executing program) 2021/02/26 10:07:24 fetching corpus: 4088, signal 268795/271371 (executing program) 2021/02/26 10:07:24 fetching corpus: 4088, signal 268795/271393 (executing program) 2021/02/26 10:07:24 fetching corpus: 4088, signal 268795/271420 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268795/271477 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268795/271496 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268795/271518 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268795/271537 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268860/271581 (executing program) 2021/02/26 10:07:25 fetching corpus: 4088, signal 268860/271609 (executing program) 2021/02/26 10:07:25 fetching corpus: 4089, signal 268861/271632 (executing program) 2021/02/26 10:07:25 fetching corpus: 4089, signal 268861/271657 (executing program) 2021/02/26 10:07:25 fetching corpus: 4090, signal 268862/271680 (executing program) 2021/02/26 10:07:25 fetching corpus: 4090, signal 268862/271710 (executing program) 2021/02/26 10:07:25 fetching corpus: 4090, signal 268862/271733 (executing program) 2021/02/26 10:07:25 fetching corpus: 4090, signal 268862/271755 (executing program) 2021/02/26 10:07:25 fetching corpus: 4091, signal 268864/271778 (executing program) 2021/02/26 10:07:25 fetching corpus: 4092, signal 268891/271825 (executing program) 2021/02/26 10:07:25 fetching corpus: 4093, signal 268899/271852 (executing program) 2021/02/26 10:07:25 fetching corpus: 4094, signal 268928/271880 (executing program) 2021/02/26 10:07:25 fetching corpus: 4094, signal 268928/271880 (executing program) 2021/02/26 10:07:30 starting 4 fuzzer processes 10:07:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="48b7e450ee65", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) 10:07:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) 10:07:32 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) [ 138.493747][ T8607] IPVS: ftp: loaded support on port[0] = 21 [ 138.810285][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 138.936735][ T8609] IPVS: ftp: loaded support on port[0] = 21 [ 138.960686][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.974121][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.989328][ T8607] device bridge_slave_0 entered promiscuous mode [ 139.010595][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.035716][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.050984][ T8607] device bridge_slave_1 entered promiscuous mode [ 139.140285][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.173305][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.275283][ T8607] team0: Port device team_slave_0 added [ 139.360546][ T8607] team0: Port device team_slave_1 added [ 139.417897][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 139.476613][ T8611] IPVS: ftp: loaded support on port[0] = 21 [ 139.524229][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.541813][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.578515][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.606428][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.617884][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.660665][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.758363][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.777883][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.798112][ T8609] device bridge_slave_0 entered promiscuous mode [ 139.827567][ T8607] device hsr_slave_0 entered promiscuous mode [ 139.846326][ T8607] device hsr_slave_1 entered promiscuous mode [ 139.877690][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.890941][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.909291][ T8609] device bridge_slave_1 entered promiscuous mode [ 140.002647][ T8652] IPVS: ftp: loaded support on port[0] = 21 [ 140.003099][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.035352][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.178086][ T8609] team0: Port device team_slave_0 added [ 140.199574][ T8609] team0: Port device team_slave_1 added [ 140.310123][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.331792][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.389007][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.460115][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.472977][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.492958][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 140.514241][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.595599][ T8609] device hsr_slave_0 entered promiscuous mode [ 140.604231][ T8609] device hsr_slave_1 entered promiscuous mode [ 140.614565][ T8609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.625791][ T8609] Cannot create hsr debugfs directory [ 140.635200][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 140.774503][ T8607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.820132][ T8607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.884217][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 140.888791][ T8607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.929175][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.943039][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.959182][ T8611] device bridge_slave_0 entered promiscuous mode [ 140.993024][ T8607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.033768][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 141.068935][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.085042][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.101107][ T8611] device bridge_slave_1 entered promiscuous mode [ 141.146328][ T8611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.184852][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.320426][ T8611] team0: Port device team_slave_0 added [ 141.353047][ T8611] team0: Port device team_slave_1 added [ 141.371775][ T4695] Bluetooth: hci2: command 0x0409 tx timeout [ 141.425822][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.439582][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.485263][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.512472][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.522520][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.565733][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.582520][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.594366][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.610217][ T8652] device bridge_slave_0 entered promiscuous mode [ 141.644447][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.662453][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.676803][ T8652] device bridge_slave_1 entered promiscuous mode [ 141.722399][ T8609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.767710][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.786516][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.811777][ T8609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.833441][ T8611] device hsr_slave_0 entered promiscuous mode [ 141.850158][ T3002] Bluetooth: hci3: command 0x0409 tx timeout [ 141.873777][ T8611] device hsr_slave_1 entered promiscuous mode [ 141.884879][ T8611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.897155][ T8611] Cannot create hsr debugfs directory [ 141.915310][ T8609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.930484][ T8609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.962559][ T8652] team0: Port device team_slave_0 added [ 141.978909][ T8652] team0: Port device team_slave_1 added [ 142.029049][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.041152][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.085671][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.119889][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.131429][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.174305][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.283413][ T8652] device hsr_slave_0 entered promiscuous mode [ 142.295195][ T8652] device hsr_slave_1 entered promiscuous mode [ 142.307659][ T8652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.320813][ T8652] Cannot create hsr debugfs directory [ 142.371843][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.478408][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.495519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.515986][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.533521][ T8611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.573164][ T3277] Bluetooth: hci0: command 0x041b tx timeout [ 142.576825][ T8611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.608365][ T8611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.658501][ T8611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.694500][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.719910][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.748937][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.773252][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.797677][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.819607][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.844141][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.859648][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.886492][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.902160][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.964408][ T38] Bluetooth: hci1: command 0x041b tx timeout [ 142.965154][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.019194][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.033636][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.069400][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.082246][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.100037][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.121212][ T8652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.137393][ T8652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.168788][ T8652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.184747][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.199447][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.220578][ T8652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.243329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.258716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.280853][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.307564][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.420714][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.433721][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.450296][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.452330][ T4695] Bluetooth: hci2: command 0x041b tx timeout [ 143.477819][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.508772][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.526267][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.561573][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.575864][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.589444][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.600821][ T9474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.639697][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.653577][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.668092][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.683789][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.695507][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.709199][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.722670][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.738016][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.811690][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.827155][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.841090][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.854450][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.867922][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.881217][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.894297][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.907463][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.927065][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.944742][ T38] Bluetooth: hci3: command 0x041b tx timeout [ 143.966434][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.984450][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.009082][ T8609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.029556][ T8607] device veth0_vlan entered promiscuous mode [ 144.041082][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.055600][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.070527][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.084035][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.131073][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.143591][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.168545][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.186140][ T8607] device veth1_vlan entered promiscuous mode [ 144.214143][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.225388][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.256886][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.273621][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.285099][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.308801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.329134][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.339722][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.404049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.418742][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.433544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.452156][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.463088][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.476552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.490304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.504257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.518176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.532127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.545820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.562498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.598145][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.626076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.641168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.662144][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.675037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.690478][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.706957][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.724330][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 144.739849][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.753470][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.768107][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.787883][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.803622][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.822930][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.838548][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.851109][ T9370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.864149][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.887932][ T8611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.951055][ T8607] device veth0_macvtap entered promiscuous mode [ 144.983438][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.996071][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.009468][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.024605][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.036523][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.050073][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.051609][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 145.063297][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.089214][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.103160][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.123889][ T8609] device veth0_vlan entered promiscuous mode [ 145.137408][ T8607] device veth1_macvtap entered promiscuous mode [ 145.165844][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.189475][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.220237][ T8609] device veth1_vlan entered promiscuous mode [ 145.246264][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.262114][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.277305][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.290622][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.304779][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.321818][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.336859][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.363110][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.398581][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.413840][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.439027][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.463216][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.478861][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.495021][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.509573][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.524056][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.531725][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 145.538144][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.560639][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.585120][ T8652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.608214][ T8652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.632768][ T8607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.647763][ T8607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.685537][ T8607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.699001][ T8607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.720863][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.740961][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.786688][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.799053][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.813585][ T8609] device veth0_macvtap entered promiscuous mode [ 145.837216][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.852300][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.864353][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.884404][ T8609] device veth1_macvtap entered promiscuous mode [ 145.913993][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.002161][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 146.031149][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.054945][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.075952][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.090329][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.107296][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.120837][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.133144][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.146698][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.165307][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.175584][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.186713][ T8611] device veth0_vlan entered promiscuous mode [ 146.203867][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.206615][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.227909][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.237806][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.270274][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.308560][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.327774][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.343364][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.358484][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.372716][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.398531][ T8609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.413422][ T8609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.428805][ T8609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.440879][ T8609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.481629][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.498627][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.514572][ T8611] device veth1_vlan entered promiscuous mode [ 146.542366][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.597147][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.610717][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.640062][ T8652] device veth0_vlan entered promiscuous mode [ 146.655880][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.666558][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.675658][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.687171][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.698575][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.727345][ T8652] device veth1_vlan entered promiscuous mode [ 146.739725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.754706][ T8611] device veth0_macvtap entered promiscuous mode [ 146.773354][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.792848][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.810072][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.812056][ T3277] Bluetooth: hci0: command 0x0419 tx timeout [ 146.828608][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.851643][ T8611] device veth1_macvtap entered promiscuous mode [ 146.864984][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.878239][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.893764][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.904263][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.933418][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 10:07:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="48b7e450ee65", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) [ 146.946956][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.960897][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.980382][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.997524][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.016618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.034906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.058351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.073216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.095770][ T8652] device veth0_macvtap entered promiscuous mode [ 147.122484][ T3277] Bluetooth: hci1: command 0x0419 tx timeout [ 147.137205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.170937][ T8652] device veth1_macvtap entered promiscuous mode [ 147.197066][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.222493][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:07:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="48b7e450ee65", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) [ 147.245548][ T8611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 10:07:41 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) [ 147.277739][ T8611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.316645][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.368003][ T8611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.396927][ T8611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.422738][ T8611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.446122][ T8611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.489715][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.511691][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:07:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="48b7e450ee65", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) [ 147.602304][ T7] Bluetooth: hci2: command 0x0419 tx timeout 10:07:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) [ 147.701844][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.734387][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.769589][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.810442][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.832554][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.863866][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.895367][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.950114][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.969758][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.995338][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.014125][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.036157][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.061750][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.081590][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 148.086886][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.125934][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.155604][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.185656][ T8652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.210076][ T8652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.231035][ T8652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.253577][ T8652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.292205][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.320662][ T9475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:07:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) [ 148.573661][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.622023][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.635359][ T9512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.689404][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.697432][ T9512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.745017][ T9490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.793297][ T9189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.818558][ T9189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.835013][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.887391][ T9189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.925858][ T9189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.949633][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:07:44 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) 10:07:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) 10:07:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) 10:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) 10:07:45 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:45 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:48 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:48 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:48 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/105, 0x69}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) splice(r2, 0x0, r4, 0x0, 0x2000000001c, 0x6) write(r3, &(0x7f0000000600)="da", 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:07:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:49 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 10:07:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) 10:07:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 10:07:49 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 10:07:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0x400}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) [ 155.602481][ T49] audit: type=1804 audit(1614334070.132:2): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/10/bus" dev="sda1" ino=14183 res=1 errno=0 [ 155.783386][ T49] audit: type=1804 audit(1614334070.152:3): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/10/bus" dev="sda1" ino=14183 res=1 errno=0 10:07:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:50 executing program 2: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='(*\xf5\xd5\xe3\xa8', 0xfffffffffffffffe, 0xff28) 10:07:50 executing program 2: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='(*\xf5\xd5\xe3\xa8', 0xfffffffffffffffe, 0xff28) [ 156.258697][ T9811] syz-executor.3 (9811) used greatest stack depth: 22992 bytes left 10:07:50 executing program 2: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='(*\xf5\xd5\xe3\xa8', 0xfffffffffffffffe, 0xff28) 10:07:51 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) 10:07:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:51 executing program 2: r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='(*\xf5\xd5\xe3\xa8', 0xfffffffffffffffe, 0xff28) 10:07:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 156.675970][ T49] audit: type=1804 audit(1614334071.212:4): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/11/bus" dev="sda1" ino=14192 res=1 errno=0 [ 156.748155][ T49] audit: type=1804 audit(1614334071.282:5): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/11/bus" dev="sda1" ino=14192 res=1 errno=0 [ 156.795832][ T49] audit: type=1804 audit(1614334071.332:6): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir925071203/syzkaller.S6vbOd/15/bus" dev="sda1" ino=14193 res=1 errno=0 [ 156.845435][ T49] audit: type=1804 audit(1614334071.342:7): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir925071203/syzkaller.S6vbOd/15/bus" dev="sda1" ino=14193 res=1 errno=0 10:07:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000006400400065d8b598571cabdf81fe7eb4ea3cb249679ab5073eced998a614e9619d43b63dd511451b1f448280100037a08c263e2885d27a7b7da2896a579b792864009e45bfd4ae0932543e37043ddcf1137092bd92ca0b515a0076f6dff546071e4a76e3dc783b9600ce91a856e6b9efb352ff4d8d1711aaa3a1d885e95ce315635bdcf2dc7b3584e42b9351f8029d8ac5307e43e853acf240e63f1dcb6408a735a984d5746e325c300000000000000000000000000000091f24ecc6d59f41de407bb5617ec05b5345eff55092a4e0f68a8fa9e6279ce962d74812f3981bad7b052b4bc05f5b472af13da1ce2f9723ccaa47466b0884255", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 157.719991][ T49] audit: type=1804 audit(1614334072.252:8): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir758049298/syzkaller.waWiw4/14/bus" dev="sda1" ino=14180 res=1 errno=0 [ 157.830508][ T49] audit: type=1804 audit(1614334072.282:9): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir758049298/syzkaller.waWiw4/14/bus" dev="sda1" ino=14180 res=1 errno=0 [ 157.911645][ T49] audit: type=1804 audit(1614334072.372:10): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir021991749/syzkaller.DRv2UV/17/bus" dev="sda1" ino=14187 res=1 errno=0 [ 157.967844][ T49] audit: type=1804 audit(1614334072.382:11): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir021991749/syzkaller.DRv2UV/17/bus" dev="sda1" ino=14187 res=1 errno=0 10:07:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="00000006400400065d8b598571cabdf81fe7eb4ea3cb249679ab5073eced998a614e9619d43b63dd511451b1f448280100037a08c263e2885d27a7b7da2896a579b792864009e45bfd4ae0932543e37043ddcf1137092bd92ca0b515a0076f6dff546071e4a76e3dc783b9600ce91a856e6b9efb352ff4d8d1711aaa3a1d885e95ce315635bdcf2dc7b3584e42b9351f8029d8ac5307e43e853acf240e63f1dcb6408a735a984d5746e325c300000000000000000000000000000091f24ecc6d59f41de407bb5617ec05b5345eff55092a4e0f68a8fa9e6279ce962d74812f3981bad7b052b4bc05f5b472af13da1ce2f9723ccaa47466b0884255", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0x10001, 0x0) 10:07:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0x10001, 0x0) 10:07:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0x10001, 0x0) 10:07:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0x10001, 0x0) 10:07:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:07:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 10:07:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 10:07:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:07:55 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 10:07:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 10:07:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:07:55 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 10:07:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:07:56 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) [ 161.726115][ T49] kauditd_printk_skb: 18 callbacks suppressed [ 161.726135][ T49] audit: type=1804 audit(1614334076.262:30): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/15/bus" dev="sda1" ino=14189 res=1 errno=0 [ 161.806691][ T49] audit: type=1804 audit(1614334076.282:31): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/15/bus" dev="sda1" ino=14189 res=1 errno=0 10:07:56 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 10:07:56 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e21, 0x8}}}}}, 0x0) 10:07:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x6048801) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 10:07:56 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 10:07:57 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e21, 0x8}}}}}, 0x0) 10:07:57 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 10:07:57 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) 10:07:57 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e21, 0x8}}}}}, 0x0) 10:07:57 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffef3) shutdown(r0, 0x1) r2 = dup3(r0, r1, 0x0) shutdown(r2, 0x0) [ 162.677010][ T49] audit: type=1804 audit(1614334077.212:32): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/16/bus" dev="sda1" ino=14180 res=1 errno=0 10:07:57 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e21, 0x8}}}}}, 0x0) [ 162.774724][ T49] audit: type=1804 audit(1614334077.222:33): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir268952461/syzkaller.X2F3Ap/16/bus" dev="sda1" ino=14180 res=1 errno=0 10:07:58 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:07:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x14, 0x0, 0x1df, &(0x7f0000000140)}) 10:07:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 163.603396][T10019] new mount options do not match the existing superblock, will be ignored 10:07:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x2, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) [ 163.619749][ C1] hrtimer: interrupt took 34945 ns 10:07:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x14, 0x0, 0x1df, &(0x7f0000000140)}) 10:07:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 10:07:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x14, 0x0, 0x1df, &(0x7f0000000140)}) [ 163.858347][T10035] new mount options do not match the existing superblock, will be ignored 10:07:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 164.356315][T10048] new mount options do not match the existing superblock, will be ignored 10:08:00 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:08:00 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x2, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 10:08:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x14, 0x0, 0x1df, &(0x7f0000000140)}) 10:08:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 166.281510][T10057] new mount options do not match the existing superblock, will be ignored 10:08:00 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:08:00 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x31c, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 10:08:00 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x2, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 10:08:01 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:08:01 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x2, 0x0) preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0) 10:08:01 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:08:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x15, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084503, &(0x7f0000000080)) 10:08:02 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, [], 0x31}, 0x9}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 10:08:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x15, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084503, &(0x7f0000000080)) 10:08:04 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x31c, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) [ 169.848212][ C1] ------------[ cut here ]------------ [ 169.910310][ C1] refcount_t: underflow; use-after-free. 10:08:04 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x31c, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) [ 170.251012][ T3370] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.274203][ T3370] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.607122][ C1] WARNING: CPU: 1 PID: 10072 at lib/refcount.c:28 refcount_warn_saturate+0x1d1/0x1e0 [ 170.635741][ C1] Modules linked in: [ 170.686958][ C1] CPU: 1 PID: 10072 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 170.709420][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 170.733687][ C1] RIP: 0010:refcount_warn_saturate+0x1d1/0x1e0 [ 170.774486][ C1] Code: e9 db fe ff ff 48 89 df e8 dc 17 f5 fd e9 8a fe ff ff e8 22 3a b1 fd 48 c7 c7 a0 d8 be 89 c6 05 60 9d ef 09 01 e8 a0 f1 fe 04 <0f> 0b e9 af fe ff ff 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 [ 170.871805][ C1] RSP: 0018:ffffc900004e8d08 EFLAGS: 00010286 [ 170.958982][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 171.011573][ C1] RDX: ffff8880137ad340 RSI: ffffffff815bd0e5 RDI: fffff5200009d193 [ 171.042286][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 171.059656][ C1] R10: ffffffff815b61be R11: 0000000000000000 R12: ffff88805f193020 [ 171.081554][ C1] R13: 1ffff9200009d1a9 R14: ffffffff882930c0 R15: 0000000000000000 [ 171.127139][ C1] FS: 0000000000000000(0000) GS:ffff88802cb00000(0000) knlGS:0000000000000000 [ 171.159387][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 171.223070][ C1] CR2: 0000000008169834 CR3: 000000000bc8e000 CR4: 0000000000150ee0 [ 171.271777][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.331622][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.406434][ C1] Call Trace: [ 171.478987][ C1] [ 171.511659][ C1] sctp_transport_put+0x138/0x180 [ 171.531829][ C1] call_timer_fn+0x1a5/0x6b0 [ 171.567010][ C1] ? add_timer_on+0x4a0/0x4a0 [ 171.614021][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 171.704482][ C1] ? sctp_generate_t3_rtx_event+0x390/0x390 [ 171.738235][ C1] __run_timers.part.0+0x67c/0xa50 [ 171.827056][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 171.875040][ C1] run_timer_softirq+0xb3/0x1d0 [ 171.915025][ C1] __do_softirq+0x29b/0x9f6 [ 171.955079][ C1] irq_exit_rcu+0x134/0x200 [ 171.973517][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 171.994981][ C1] [ 172.032797][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 172.187906][ C1] RIP: 0010:lock_is_held_type+0x31/0x130 [ 172.242584][ C1] Code: bd 01 00 00 00 41 54 55 53 48 83 ec 08 8b 0d 32 af c3 04 85 c9 0f 84 d0 00 00 00 65 8b 05 d7 8f ff 76 85 c0 0f 85 c1 00 00 00 <65> 4c 8b 24 25 00 f0 01 00 41 8b 94 24 84 09 00 00 85 d2 0f 85 a8 [ 172.339135][ C1] RSP: 0018:ffffc90023f5f568 EFLAGS: 00000246 [ 172.358133][ C1] RAX: 0000000000000000 RBX: 1ffff920047ebeb9 RCX: 0000000000000001 [ 172.382132][ C1] RDX: 1ffffffff17ef936 RSI: 00000000ffffffff RDI: ffffffff8bf742e0 [ 172.405711][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8dc5e84f [ 172.429540][ C1] R10: fffffbfff1b8bd09 R11: 0000000000000000 R12: 0000000000000001 [ 172.466176][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 172.539038][ C1] rcu_read_lock_sched_held+0x3a/0x70 [ 172.602986][ C1] lock_acquire+0x5d4/0x730 [ 172.694695][ C1] ? lock_release+0x710/0x710 [ 172.735063][ C1] ? lock_is_held_type+0xd5/0x130 [ 172.764229][ C1] lock_page_memcg+0x69/0x4f0 [ 172.810516][ C1] ? lock_page_memcg+0x33/0x4f0 [ 172.831434][ C1] ? unlock_page_memcg+0x13c/0x270 [ 172.921666][ C1] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 172.956359][ C1] ? vm_normal_page+0x146/0x2a0 [ 172.994661][ C1] page_remove_rmap+0x25/0x1430 [ 173.021299][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 173.059069][ C1] unmap_page_range+0xe30/0x2650 [ 173.112859][ C1] ? lock_is_held_type+0xd5/0x130 [ 173.236396][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 173.260323][ C1] ? lock_release+0x3bb/0x710 [ 173.298982][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 173.312016][ C1] ? uprobe_munmap+0x1c/0x560 [ 173.330969][ C1] unmap_single_vma+0x198/0x300 [ 173.381618][ C1] unmap_vmas+0x16d/0x2f0 [ 173.411632][ C1] ? zap_vma_ptes+0x100/0x100 [ 173.458974][ C1] ? lru_add_drain_cpu+0x4a8/0x8c0 [ 173.549094][ C1] exit_mmap+0x2a8/0x590 [ 173.640881][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 173.730711][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 173.811055][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 173.859034][ C1] ? __khugepaged_exit+0x2d9/0x470 [ 173.876261][ C1] __mmput+0x122/0x470 [ 173.926491][ C1] mmput+0x58/0x60 [ 174.001751][ C1] do_exit+0xb6f/0x2ae0 [ 174.014128][ C1] ? lock_is_held_type+0xd5/0x130 [ 174.047019][ C1] ? find_held_lock+0x2d/0x110 [ 174.095560][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 174.134159][ C1] ? lock_release+0x3bb/0x710 [ 174.164603][ C1] ? get_signal+0x337/0x2100 [ 174.205857][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 174.221122][ C1] ? lock_is_held_type+0xd5/0x130 [ 174.303380][ C1] do_group_exit+0x125/0x310 [ 174.383121][ C1] get_signal+0x42c/0x2100 [ 174.407145][ C1] ? lock_is_held_type+0xd5/0x130 [ 174.556702][ C1] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 174.626200][ C1] ? __fget_light+0x155/0x280 [ 174.699769][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 174.804790][ C1] ? perf_event_set_output+0x4c0/0x4c0 [ 174.875050][ C1] exit_to_user_mode_prepare+0x148/0x250 [ 174.898008][ C1] syscall_exit_to_user_mode+0x19/0x50 [ 175.003023][ C1] __do_fast_syscall_32+0x62/0x80 [ 175.172106][ C1] do_fast_syscall_32+0x2f/0x70 [ 175.206997][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 175.246886][ C1] RIP: 0023:0xf7fd8549 [ 175.311119][ C1] Code: Unable to access opcode bytes at RIP 0xf7fd851f. [ 175.395674][ C1] RSP: 002b:00000000f55d25fc EFLAGS: 00000296 ORIG_RAX: 0000000000000150 [ 175.487142][ C1] RAX: 0000000000000003 RBX: 000000002001d000 RCX: 0000000000000000 [ 175.523829][ C1] RDX: 00000000ffffffff RSI: 00000000ffffffff RDI: 0000000000000000 [ 175.588924][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.666170][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 175.711606][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.778421][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 175.797957][ C1] CPU: 1 PID: 10072 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 175.823477][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 175.852852][ C1] Call Trace: [ 175.862644][ C1] [ 175.869695][ C1] dump_stack+0xfa/0x151 [ 175.882380][ C1] panic+0x306/0x73d [ 175.893477][ C1] ? __warn_printk+0xf3/0xf3 [ 175.906090][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 175.919633][ C1] ? refcount_warn_saturate+0x1d1/0x1e0 [ 175.934324][ C1] ? __warn+0xf1/0x210 [ 175.944971][ C1] ? __warn.cold+0x1a/0x44 [ 175.956160][ C1] ? refcount_warn_saturate+0x1d1/0x1e0 [ 175.972173][ C1] __warn.cold+0x35/0x44 [ 175.983473][ C1] ? refcount_warn_saturate+0x1d1/0x1e0 [ 175.999727][ C1] ? refcount_warn_saturate+0x1d1/0x1e0 [ 176.016066][ C1] report_bug+0x1bd/0x210 [ 176.027633][ C1] handle_bug+0x3c/0x60 [ 176.038932][ C1] exc_invalid_op+0x14/0x40 [ 176.050367][ C1] asm_exc_invalid_op+0x12/0x20 [ 176.062735][ C1] RIP: 0010:refcount_warn_saturate+0x1d1/0x1e0 [ 176.083092][ C1] Code: e9 db fe ff ff 48 89 df e8 dc 17 f5 fd e9 8a fe ff ff e8 22 3a b1 fd 48 c7 c7 a0 d8 be 89 c6 05 60 9d ef 09 01 e8 a0 f1 fe 04 <0f> 0b e9 af fe ff ff 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 [ 176.136767][ C1] RSP: 0018:ffffc900004e8d08 EFLAGS: 00010286 [ 176.150963][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 176.171111][ C1] RDX: ffff8880137ad340 RSI: ffffffff815bd0e5 RDI: fffff5200009d193 [ 176.190864][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 176.211560][ C1] R10: ffffffff815b61be R11: 0000000000000000 R12: ffff88805f193020 [ 176.232524][ C1] R13: 1ffff9200009d1a9 R14: ffffffff882930c0 R15: 0000000000000000 [ 176.251656][ C1] ? sctp_generate_t3_rtx_event+0x390/0x390 [ 176.265562][ C1] ? wake_up_klogd.part.0+0x8e/0xd0 [ 176.279073][ C1] ? vprintk_func+0x95/0x1e0 [ 176.291187][ C1] ? refcount_warn_saturate+0x1d1/0x1e0 [ 176.304866][ C1] sctp_transport_put+0x138/0x180 [ 176.317038][ C1] call_timer_fn+0x1a5/0x6b0 [ 176.328591][ C1] ? add_timer_on+0x4a0/0x4a0 [ 176.340026][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 176.355128][ C1] ? sctp_generate_t3_rtx_event+0x390/0x390 [ 176.369810][ C1] __run_timers.part.0+0x67c/0xa50 [ 176.382234][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 176.393016][ C1] run_timer_softirq+0xb3/0x1d0 [ 176.404595][ C1] __do_softirq+0x29b/0x9f6 [ 176.416885][ C1] irq_exit_rcu+0x134/0x200 [ 176.427467][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 176.442169][ C1] [ 176.451026][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 176.467862][ C1] RIP: 0010:lock_is_held_type+0x31/0x130 [ 176.483395][ C1] Code: bd 01 00 00 00 41 54 55 53 48 83 ec 08 8b 0d 32 af c3 04 85 c9 0f 84 d0 00 00 00 65 8b 05 d7 8f ff 76 85 c0 0f 85 c1 00 00 00 <65> 4c 8b 24 25 00 f0 01 00 41 8b 94 24 84 09 00 00 85 d2 0f 85 a8 [ 176.535750][ C1] RSP: 0018:ffffc90023f5f568 EFLAGS: 00000246 [ 176.552027][ C1] RAX: 0000000000000000 RBX: 1ffff920047ebeb9 RCX: 0000000000000001 [ 176.573894][ C1] RDX: 1ffffffff17ef936 RSI: 00000000ffffffff RDI: ffffffff8bf742e0 [ 176.594571][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8dc5e84f [ 176.615824][ C1] R10: fffffbfff1b8bd09 R11: 0000000000000000 R12: 0000000000000001 [ 176.637152][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 176.659456][ C1] rcu_read_lock_sched_held+0x3a/0x70 [ 176.672676][ C1] lock_acquire+0x5d4/0x730 [ 176.683897][ C1] ? lock_release+0x710/0x710 [ 176.696063][ C1] ? lock_is_held_type+0xd5/0x130 [ 176.708832][ C1] lock_page_memcg+0x69/0x4f0 [ 176.720724][ C1] ? lock_page_memcg+0x33/0x4f0 [ 176.732876][ C1] ? unlock_page_memcg+0x13c/0x270 [ 176.746434][ C1] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 176.761346][ C1] ? vm_normal_page+0x146/0x2a0 [ 176.774298][ C1] page_remove_rmap+0x25/0x1430 [ 176.788220][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 176.804301][ C1] unmap_page_range+0xe30/0x2650 [ 176.817913][ C1] ? lock_is_held_type+0xd5/0x130 [ 176.832270][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 176.847461][ C1] ? lock_release+0x3bb/0x710 [ 176.859415][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 176.870230][ C1] ? uprobe_munmap+0x1c/0x560 [ 176.881819][ C1] unmap_single_vma+0x198/0x300 [ 176.892465][ C1] unmap_vmas+0x16d/0x2f0 [ 176.900406][ C1] ? zap_vma_ptes+0x100/0x100 [ 176.912776][ C1] ? lru_add_drain_cpu+0x4a8/0x8c0 [ 176.926361][ C1] exit_mmap+0x2a8/0x590 [ 176.936851][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 176.949100][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 176.961685][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 176.978744][ C1] ? __khugepaged_exit+0x2d9/0x470 [ 176.992952][ C1] __mmput+0x122/0x470 [ 177.005251][ C1] mmput+0x58/0x60 [ 177.015805][ C1] do_exit+0xb6f/0x2ae0 [ 177.027767][ C1] ? lock_is_held_type+0xd5/0x130 [ 177.042658][ C1] ? find_held_lock+0x2d/0x110 [ 177.055745][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 177.071987][ C1] ? lock_release+0x3bb/0x710 [ 177.087514][ C1] ? get_signal+0x337/0x2100 [ 177.102917][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 177.119111][ C1] ? lock_is_held_type+0xd5/0x130 [ 177.136271][ C1] do_group_exit+0x125/0x310 [ 177.150075][ C1] get_signal+0x42c/0x2100 [ 177.165250][ C1] ? lock_is_held_type+0xd5/0x130 [ 177.179580][ C1] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 177.195311][ C1] ? __fget_light+0x155/0x280 [ 177.209267][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 177.224660][ C1] ? perf_event_set_output+0x4c0/0x4c0 [ 177.241293][ C1] exit_to_user_mode_prepare+0x148/0x250 [ 177.259956][ C1] syscall_exit_to_user_mode+0x19/0x50 [ 177.276467][ C1] __do_fast_syscall_32+0x62/0x80 [ 177.292394][ C1] do_fast_syscall_32+0x2f/0x70 [ 177.307606][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 177.325407][ C1] RIP: 0023:0xf7fd8549 [ 177.337305][ C1] Code: Unable to access opcode bytes at RIP 0xf7fd851f. [ 177.356111][ C1] RSP: 002b:00000000f55d25fc EFLAGS: 00000296 ORIG_RAX: 0000000000000150 [ 177.380128][ C1] RAX: 0000000000000003 RBX: 000000002001d000 RCX: 0000000000000000 [ 177.404126][ C1] RDX: 00000000ffffffff RSI: 00000000ffffffff RDI: 0000000000000000 [ 177.424545][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.445278][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 177.466726][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.493611][ C1] Dumping ftrace buffer: [ 177.506618][ C1] (ftrace buffer empty) [ 177.518246][ C1] Kernel Offset: disabled [ 177.529450][ C1] Rebooting in 1 seconds.. [ 178.560118][ C1] ACPI MEMORY or I/O RESET_REG. Connection to localhost closed by remote host. VM DIAGNOSIS: 10:08:05 Registers: info registers vcpu 0 RAX=000000000006a49b RBX=ffffffff8bcbc340 RCX=ffffffff89027000 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=fffffbfff1797868 RSP=ffffffff8bc07e40 R8 =0000000000000001 R9 =ffff88802ca3610b R10=ffffed1005946c21 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8dc5e848 R15=0000000000000000 RIP=ffffffff8904c30e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802ca00000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560c6f4c3847 CR3=000000001b093000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000007fe1 RCX=0000000000000100 RDX=ffff8880137ad340 RSI=ffffffff8163f6b7 RDI=0000000000000003 RBP=ffff88802cb26388 RSP=ffffc900004e8638 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8163f6d0 R11=0000000000000000 R12=0000000000000001 R13=dffffc0000000000 R14=ffff88802cb264a8 R15=0000000000000000 RIP=ffffffff8163f6bf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000008169834 CR3=000000000bc8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002 XMM02=00002300000000000000006600000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffffffff8fe401c0 RSI=0000000000000000 RDI=ffffffff8fe40140 RBP=0000000000000000 RSP=ffffc90000540cc8 R8 =0000000000000000 R9 =ffffffff8fab0867 R10=ffffffff81639dec R11=0000000000000000 R12=00000000129388d9 R13=0000000000000018 R14=ffffffff8fe401e8 R15=ffffffff8fe401c0 RIP=ffffffff814c4c82 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560c6f41e698 CR3=000000001b093000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=000000000000000040c3880000000000 XMM03=0000000000000000416312d000000000 XMM04=74656e692474656b636f73203d203072 XMM05=5b3d2930303130303030303030663778 XMM06=2826202c6331337830202c3078307b7b XMM07=3d293034343030303030303066377830 XMM08=35313030303030306637783028267b5b XMM09=667830202c363930342f22223d293063 XMM10=2c307830202c317830202c5d7d636666 XMM11=666666667830202c5d7d7d3031783020 XMM12=0a29307830202c307830202c66316666 XMM13=2930317830202c7d7974706d6540202c XMM14=302826202c30722867736d646e65730a XMM15=7b3d2938636661313030303030663778 info registers vcpu 3 RAX=0000000080010001 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888011479bc0 RSI=ffffffff8163d786 RDI=0000000000000003 RBP=0000000000007fe1 RSP=ffffc90000598f78 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8163d79c R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8163d788 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff2118e850 CR3=0000000012d82000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00009fc0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5837fe9dc1c91f3200000000000406f8 XMM01=8ca0b852b1c7c8e10000000000040898 XMM02=f1c1a81e7e6f16870000000000040ae0 XMM03=ac8bc31478ec85110000000000043b38 XMM04=eb5762238bfadff000000000001a7a80 XMM05=d3fdd5f48436fbd70000000000040b88 XMM06=d426cfd8a30b0ba60000000000040a40 XMM07=a1fcdcf819d7e1e50000000000040808 XMM08=52c62d7ba4c02cc700000000001a78a8 XMM09=51685b050f231100226b070707070707 XMM10=07070707505151515151685b07072411 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000