[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2021/02/10 21:46:10 fuzzer started 2021/02/10 21:46:10 dialing manager at 10.128.0.163:42439 2021/02/10 21:46:10 syscalls: 3470 2021/02/10 21:46:10 code coverage: enabled 2021/02/10 21:46:10 comparison tracing: enabled 2021/02/10 21:46:10 extra coverage: enabled 2021/02/10 21:46:10 setuid sandbox: enabled 2021/02/10 21:46:10 namespace sandbox: enabled 2021/02/10 21:46:10 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/10 21:46:10 fault injection: enabled 2021/02/10 21:46:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/10 21:46:10 net packet injection: enabled 2021/02/10 21:46:10 net device setup: enabled 2021/02/10 21:46:10 concurrency sanitizer: enabled 2021/02/10 21:46:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/10 21:46:10 USB emulation: enabled 2021/02/10 21:46:10 hci packet injection: enabled 2021/02/10 21:46:10 wifi device emulation: enabled 2021/02/10 21:46:11 suppressing KCSAN reports in functions: 'ext4_free_inodes_count' '__xa_clear_mark' 2021/02/10 21:46:11 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/10 21:46:11 fetching corpus: 48, signal 27040/29619 (executing program) 2021/02/10 21:46:11 fetching corpus: 98, signal 39895/42715 (executing program) 2021/02/10 21:46:11 fetching corpus: 148, signal 48127/51022 (executing program) 2021/02/10 21:46:11 fetching corpus: 198, signal 55763/58399 (executing program) 2021/02/10 21:46:11 fetching corpus: 247, signal 59835/62340 (executing program) 2021/02/10 21:46:11 fetching corpus: 297, signal 64012/66171 (executing program) 2021/02/10 21:46:11 fetching corpus: 343, signal 69051/70467 (executing program) 2021/02/10 21:46:12 fetching corpus: 392, signal 74071/74514 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74271/74705 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/74824 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/74874 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/74910 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/74958 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75008 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75049 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75091 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75131 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75174 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75218 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75270 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75314 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75356 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75395 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74362/75443 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74364/75493 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74364/75542 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75615 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75656 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75704 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75746 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75787 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75821 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75853 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75903 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75951 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/75988 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/76030 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/76031 (executing program) 2021/02/10 21:46:12 fetching corpus: 395, signal 74424/76031 (executing program) 2021/02/10 21:46:13 starting 6 fuzzer processes 21:46:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x29, 0x8, 0x0, 0x539000) 21:46:14 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:46:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0x7}) 21:46:14 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:14 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) syzkaller login: [ 34.378897][ T8421] IPVS: ftp: loaded support on port[0] = 21 [ 34.477701][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 34.493521][ T8423] IPVS: ftp: loaded support on port[0] = 21 [ 34.516980][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.524215][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.532128][ T8421] device bridge_slave_0 entered promiscuous mode [ 34.541354][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.548526][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.556298][ T8421] device bridge_slave_1 entered promiscuous mode [ 34.582067][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.593448][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.610210][ T8421] team0: Port device team_slave_0 added [ 34.618287][ T8421] team0: Port device team_slave_1 added [ 34.644399][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.656887][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.683169][ T8421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.705919][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.712871][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.739002][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.751680][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 34.768582][ T8425] IPVS: ftp: loaded support on port[0] = 21 [ 34.798152][ T8421] device hsr_slave_0 entered promiscuous mode [ 34.804759][ T8421] device hsr_slave_1 entered promiscuous mode [ 34.830623][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.837737][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.847425][ T8423] device bridge_slave_0 entered promiscuous mode [ 34.877208][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.884256][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.895297][ T8423] device bridge_slave_1 entered promiscuous mode [ 34.918636][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 34.923744][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.943697][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.981031][ T8423] team0: Port device team_slave_0 added [ 35.018082][ T8423] team0: Port device team_slave_1 added [ 35.026718][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 35.040453][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 35.055362][ T8421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.087891][ T8421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.131175][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.144174][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.171582][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.182364][ T8421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.204875][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 35.217207][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.224380][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.251813][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.267197][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 35.269289][ T8421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.321558][ T8423] device hsr_slave_0 entered promiscuous mode [ 35.328007][ T8423] device hsr_slave_1 entered promiscuous mode [ 35.334314][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.341988][ T8423] Cannot create hsr debugfs directory [ 35.352378][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.359583][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.367821][ T8425] device bridge_slave_0 entered promiscuous mode [ 35.379734][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.386855][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.394483][ T8427] device bridge_slave_0 entered promiscuous mode [ 35.402874][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.410263][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.417959][ T8427] device bridge_slave_1 entered promiscuous mode [ 35.436309][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.443619][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.451201][ T8425] device bridge_slave_1 entered promiscuous mode [ 35.497980][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.524649][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 35.543209][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.563096][ T8427] team0: Port device team_slave_0 added [ 35.577560][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.588962][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.607591][ T8425] team0: Port device team_slave_0 added [ 35.613821][ T8427] team0: Port device team_slave_1 added [ 35.631530][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.639862][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.666495][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.678299][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.685757][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.711895][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.723481][ T8425] team0: Port device team_slave_1 added [ 35.737137][ T8423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.767419][ T8423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.781660][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.789035][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.815521][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.839857][ T8423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.848006][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.854943][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.881678][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.895413][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 35.909078][ T8427] device hsr_slave_0 entered promiscuous mode [ 35.915692][ T8427] device hsr_slave_1 entered promiscuous mode [ 35.922047][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.929775][ T8427] Cannot create hsr debugfs directory [ 35.935469][ T8423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.953957][ T8425] device hsr_slave_0 entered promiscuous mode [ 35.960494][ T8425] device hsr_slave_1 entered promiscuous mode [ 35.967762][ T8425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.975495][ T8425] Cannot create hsr debugfs directory [ 35.987831][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.995075][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.002655][ T8429] device bridge_slave_0 entered promiscuous mode [ 36.011918][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.019113][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.026882][ T8429] device bridge_slave_1 entered promiscuous mode [ 36.101677][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.119275][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.136511][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.160663][ T8425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.185539][ T8429] team0: Port device team_slave_0 added [ 36.192094][ T8425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.204716][ T8425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.219681][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.227397][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.235657][ T8431] device bridge_slave_0 entered promiscuous mode [ 36.243108][ T8429] team0: Port device team_slave_1 added [ 36.252830][ T8425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.270822][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.278031][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.285941][ T8431] device bridge_slave_1 entered promiscuous mode [ 36.297310][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.304254][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.330610][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.342020][ T8427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.356135][ T8427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.371165][ T8427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.382388][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.389538][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.416164][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.425126][ T3718] Bluetooth: hci0: command 0x0409 tx timeout [ 36.431215][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.448701][ T8427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.463204][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.470894][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.484974][ T4926] Bluetooth: hci1: command 0x0409 tx timeout [ 36.493534][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.508575][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.527408][ T8429] device hsr_slave_0 entered promiscuous mode [ 36.534686][ T8429] device hsr_slave_1 entered promiscuous mode [ 36.541323][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.549207][ T8429] Cannot create hsr debugfs directory [ 36.573840][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.586519][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.594860][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.603911][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.611057][ T8163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.618703][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.627239][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.635650][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.642821][ T8163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.650551][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.659518][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.669557][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.689797][ T8431] team0: Port device team_slave_0 added [ 36.697732][ T8431] team0: Port device team_slave_1 added [ 36.715056][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.723022][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.725330][ T4926] Bluetooth: hci2: command 0x0409 tx timeout [ 36.731462][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.744070][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.752701][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.761670][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.770233][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.778612][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.785839][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.793628][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.802132][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.810531][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.817598][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.825468][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.834137][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.852811][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.862615][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.889472][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.890399][ T4926] Bluetooth: hci3: command 0x0409 tx timeout [ 36.920029][ T8421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.933254][ T8421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.944598][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.953219][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.961647][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.970345][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.978988][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.987464][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.996139][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.004346][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.012940][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.021458][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.030144][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.038551][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.044830][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 37.046813][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.061254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.076134][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.083221][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.110253][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.126349][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 37.137374][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.149032][ T8423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.160460][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.169260][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.177129][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.185435][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.198942][ T8431] device hsr_slave_0 entered promiscuous mode [ 37.205614][ T8431] device hsr_slave_1 entered promiscuous mode [ 37.211919][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.219814][ T8431] Cannot create hsr debugfs directory [ 37.240944][ T8429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.251030][ T8429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.267739][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.277677][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.286842][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.298760][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.311937][ T8429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.322331][ T8429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.334063][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.345105][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.352651][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.370799][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.393743][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.408314][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.418896][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.427839][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.435901][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.452028][ T8423] device veth0_vlan entered promiscuous mode [ 37.469833][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.477964][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.486626][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.495645][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.503879][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.510921][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.518795][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.527649][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.535836][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.542854][ T3718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.550747][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.559416][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.568183][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.575985][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.583667][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.599846][ T8431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.612834][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.630373][ T8423] device veth1_vlan entered promiscuous mode [ 37.641702][ T8431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.650657][ T8431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.661649][ T8431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.671701][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.681895][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.690031][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.698858][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.707926][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.717684][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.726578][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.735942][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.744428][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.754157][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.763897][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.786914][ T8423] device veth0_macvtap entered promiscuous mode [ 37.796742][ T8421] device veth0_vlan entered promiscuous mode [ 37.805847][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.815426][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.823844][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.831042][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.839148][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.847873][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.856102][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.863147][ T3718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.871190][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.880199][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.888865][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.897441][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.905924][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.914239][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.923030][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.931739][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.940405][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.948557][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.965512][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.974322][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.982855][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.991008][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.999997][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.009042][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.017960][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.026431][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.034929][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.046233][ T8425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.057471][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.069692][ T8421] device veth1_vlan entered promiscuous mode [ 38.080033][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.089304][ T8423] device veth1_macvtap entered promiscuous mode [ 38.101061][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.109042][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.117229][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.125655][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.154656][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.162620][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.171142][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.185987][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.194895][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.213397][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.222027][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.231872][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.241040][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.254442][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.261904][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.270317][ T8421] device veth0_macvtap entered promiscuous mode [ 38.301003][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.309593][ T8421] device veth1_macvtap entered promiscuous mode [ 38.316460][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.327014][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.335347][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.343979][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.356522][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.367121][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.376229][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.396110][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.405513][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.428664][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.439331][ T8423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.448499][ T8423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.457648][ T8423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.466684][ T8423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.481105][ T8425] device veth0_vlan entered promiscuous mode [ 38.487417][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 38.493462][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.501287][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.509197][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.517408][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.526339][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.537785][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.550727][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.560594][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.571205][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 38.572404][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.588762][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.599503][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 38.610126][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.620954][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.629868][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.637679][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.646954][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.657037][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.666649][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.673922][ T4926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.682362][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.691352][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.700381][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.709316][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.720658][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.729061][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.737984][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.746623][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.753682][ T4926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.764619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.772982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.781815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.791015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.799761][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.807949][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.816173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.824781][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 38.831966][ T8421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.842239][ T8421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.854095][ T8421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.866476][ T8421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.887409][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.897010][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.906972][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.914551][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.924505][ T8425] device veth1_vlan entered promiscuous mode [ 38.947551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.956377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.966464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.984620][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 39.020608][ T8427] device veth0_vlan entered promiscuous mode [ 39.030697][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.042317][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.051980][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.061340][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.070308][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.079110][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.087887][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.096949][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.105293][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.113492][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.122564][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.124237][ T3658] Bluetooth: hci4: command 0x041b tx timeout [ 39.132191][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.145317][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.153675][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.161995][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.175368][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.184609][ T8425] device veth0_macvtap entered promiscuous mode [ 39.206624][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.214139][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 39.217678][ T8431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.232827][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.237808][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.255024][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.262637][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.270728][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.278966][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.287165][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.295420][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.303989][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.312583][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.321180][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.328960][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.336593][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.343976][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.352206][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.365445][ T8425] device veth1_macvtap entered promiscuous mode [ 39.378372][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.396463][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.404013][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.415392][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.423142][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.424418][ T8427] device veth1_vlan entered promiscuous mode [ 39.437257][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.453702][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.463783][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.503115][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.513206][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.525889][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.536825][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.547443][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.557473][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.568042][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.578975][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.588476][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.599691][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.609707][ T8425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.621406][ T8425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.632350][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.645720][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.653549][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.664347][ T8168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.672249][ T8168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.676829][ T8427] device veth0_macvtap entered promiscuous mode [ 39.690419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.699149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.708303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.720450][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.729652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.737892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.746007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.754695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.765616][ T8425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.778263][ T8425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786993][ T8425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.795875][ T8425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.813187][ T8427] device veth1_macvtap entered promiscuous mode [ 39.821565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.831604][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.883224][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.900523][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.912020][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:46:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x29, 0x8, 0x0, 0x539000) [ 39.926235][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.943735][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.957835][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:46:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x29, 0x8, 0x0, 0x539000) [ 39.992677][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.034245][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.043367][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.066588][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.093201][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.114497][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.138207][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.149569][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.162390][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.173550][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 21:46:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x29, 0x8, 0x0, 0x539000) [ 40.185986][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.201390][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.217660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.231550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:46:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x28020000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004056000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)) [ 40.269698][ T8427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285246][ T8427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.316289][ T8427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.339302][ T8427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.388749][ T8429] device veth0_vlan entered promiscuous mode [ 40.430455][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.434454][ T8168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.449229][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.456395][ T8168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.457697][ T9806] loop0: detected capacity change from 264192 to 0 [ 40.477223][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.491087][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.501136][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.511252][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.519195][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.539666][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.540795][ T8429] device veth1_vlan entered promiscuous mode [ 40.563815][ T3718] Bluetooth: hci0: command 0x040f tx timeout [ 40.564980][ T9806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.595566][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.613432][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.627217][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.643910][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 40.653084][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.678946][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 21:46:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x28020000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004056000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)) [ 40.704868][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.723615][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.742027][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.753095][ T8431] device veth0_vlan entered promiscuous mode [ 40.764043][ T8429] device veth0_macvtap entered promiscuous mode [ 40.780841][ T8429] device veth1_macvtap entered promiscuous mode [ 40.788369][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.804725][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.812824][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.822797][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.851224][ T8431] device veth1_vlan entered promiscuous mode [ 40.883939][ T9752] Bluetooth: hci2: command 0x040f tx timeout [ 40.905592][ T9829] loop0: detected capacity change from 264192 to 0 [ 40.917362][ T35] audit: type=1804 audit(1612993581.715:2): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/0/bus" dev="sda1" ino=14198 res=1 errno=0 [ 40.955164][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.989046][ T9829] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.002300][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.013382][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.025251][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.036584][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.043820][ T7] Bluetooth: hci3: command 0x040f tx timeout 21:46:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x28020000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004056000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)) [ 41.048616][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.064030][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.076044][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.093341][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.104857][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.116843][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.127685][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.138670][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.149887][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.161252][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.172119][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.183396][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.195820][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.203820][ T4926] Bluetooth: hci4: command 0x040f tx timeout [ 41.210154][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.225458][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.236438][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.246017][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.261775][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.273013][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.283710][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 41.292241][ T8431] device veth0_macvtap entered promiscuous mode [ 41.301089][ T9848] loop0: detected capacity change from 264192 to 0 [ 41.311955][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.325648][ T8429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.350687][ T9848] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 21:46:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x28020000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004056000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000080)) [ 41.355697][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.375685][ T8429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.408299][ T8429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.417804][ T8429] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.447223][ T8431] device veth1_macvtap entered promiscuous mode [ 41.491584][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.509985][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.531869][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.552375][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.566656][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.597253][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.640975][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.667016][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.700718][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.741539][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.759222][ T35] audit: type=1804 audit(1612993582.555:3): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/0/bus" dev="sda1" ino=14198 res=1 errno=0 21:46:22 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 41.770935][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.796773][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.807041][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.817655][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.829664][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 41.840784][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.854923][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.868661][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.879318][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 21:46:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:22 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) [ 41.902151][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.921638][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.949892][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.962344][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.973021][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 41.990150][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.009320][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.024903][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.053008][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 42.066504][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.079516][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.096720][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.124043][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.135175][ T8431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.148429][ T8431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.162931][ T8431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.180251][ T8431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.194272][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.206365][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.215043][ T35] audit: type=1804 audit(1612993583.016:4): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/1/bus" dev="sda1" ino=14191 res=1 errno=0 [ 42.225096][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.269343][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.277613][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.299777][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.344847][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.352706][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.396764][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.407400][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.418025][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.436484][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.645360][ T4926] Bluetooth: hci0: command 0x0419 tx timeout 21:46:23 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0x7}) 21:46:23 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:23 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:46:23 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) [ 42.723322][ T4926] Bluetooth: hci1: command 0x0419 tx timeout 21:46:23 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0x7}) 21:46:23 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x27}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:46:23 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:23 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) [ 42.963377][ T4926] Bluetooth: hci2: command 0x0419 tx timeout [ 43.046406][ C1] hrtimer: interrupt took 63976 ns 21:46:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0x7}) [ 43.123574][ T3658] Bluetooth: hci3: command 0x0419 tx timeout 21:46:24 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 1: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 0: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:24 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) [ 43.256240][ T35] audit: type=1804 audit(1612993584.046:5): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/2/bus" dev="sda1" ino=14191 res=1 errno=0 [ 43.283609][ T3658] Bluetooth: hci4: command 0x0419 tx timeout [ 43.364334][ T3658] Bluetooth: hci5: command 0x0419 tx timeout 21:46:24 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 1: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:25 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:25 executing program 0: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:25 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) [ 44.337926][ T35] audit: type=1804 audit(1612993585.136:6): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/3/bus" dev="sda1" ino=14205 res=1 errno=0 21:46:25 executing program 5: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:25 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:25 executing program 1: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:25 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 0: clock_gettime(0x0, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x2e8f, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x156, [0x0, 0x20000640, 0x20000854, 0x20000884], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x8808, 'netdevsim0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'syzkaller0\x00', @dev, [], @dev={[], 0x18}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x96, 0xc6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1de) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:46:26 executing program 2: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 4: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 2: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 5: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 3: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 4: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 4: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 1: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 2: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 3: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 1: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:26 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:26 executing program 3: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 21:46:26 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) [ 45.935874][ T35] audit: type=1804 audit(1612993586.736:7): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir509179010/syzkaller.M0GHRu/7/bus" dev="sda1" ino=14208 res=1 errno=0 21:46:26 executing program 1: io_setup(0x5, &(0x7f0000000380)=0x0) r1 = socket(0x10, 0x400000000080803, 0x0) write(r1, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) write(r2, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}}], 0x40000000000003c, 0x0, 0x0) io_submit(r0, 0x0, 0x0) [ 45.971541][ T35] audit: type=1804 audit(1612993586.766:8): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/7/bus" dev="sda1" ino=14209 res=1 errno=0 21:46:26 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000001040)=""/65) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 21:46:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 46.182485][ T35] audit: type=1804 audit(1612993586.976:9): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir863577077/syzkaller.l0dGXm/10/bus" dev="sda1" ino=14218 res=1 errno=0 [ 46.246027][ T35] audit: type=1804 audit(1612993587.016:10): pid=10145 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir097539844/syzkaller.oxgjXD/13/bus" dev="sda1" ino=14219 res=1 errno=0 [ 46.300187][ T35] audit: type=1804 audit(1612993587.016:11): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir200017670/syzkaller.yTrLaT/18/bus" dev="sda1" ino=14220 res=1 errno=0 [ 46.339732][ T35] audit: type=1804 audit(1612993587.096:12): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir438042471/syzkaller.w8Nsn3/10/bus" dev="sda1" ino=14221 res=1 errno=0 21:46:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 46.916750][ T35] audit: type=1804 audit(1612993587.716:13): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir500619740/syzkaller.TToLC9/8/bus" dev="sda1" ino=14208 res=1 errno=0 [ 46.977514][ T35] audit: type=1804 audit(1612993587.756:14): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir509179010/syzkaller.M0GHRu/8/bus" dev="sda1" ino=14209 res=1 errno=0 21:46:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 21:46:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)) open(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 47.172169][ T35] audit: type=1804 audit(1612993587.967:15): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir863577077/syzkaller.l0dGXm/11/bus" dev="sda1" ino=14206 res=1 errno=0 [ 47.278317][ T35] audit: type=1804 audit(1612993588.077:16): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir200017670/syzkaller.yTrLaT/19/bus" dev="sda1" ino=14220 res=1 errno=0 [ 47.515805][T10168] ================================================================== [ 47.523998][T10168] BUG: KCSAN: data-race in ext4_fc_commit / ext4_fc_commit [ 47.531691][T10168] [ 47.534010][T10168] write to 0xffff88814461f710 of 8 bytes by task 10160 on cpu 1: [ 47.541733][T10168] ext4_fc_commit+0x1fa/0x19d0 [ 47.546676][T10168] ext4_sync_file+0x336/0x6e0 [ 47.551440][T10168] vfs_fsync_range+0x107/0x120 [ 47.556229][T10168] ext4_buffered_write_iter+0x38f/0x3e0 [ 47.561776][T10168] ext4_file_write_iter+0x47a/0x1060 [ 47.567488][T10168] do_iter_readv_writev+0x2cb/0x360 [ 47.572996][T10168] do_iter_write+0x112/0x4c0 [ 47.577743][T10168] vfs_iter_write+0x4c/0x70 [ 47.582362][T10168] iter_file_splice_write+0x41a/0x770 [ 47.587947][T10168] direct_splice_actor+0x80/0xa0 [ 47.592887][T10168] splice_direct_to_actor+0x345/0x650 [ 47.598408][T10168] do_splice_direct+0xf5/0x170 [ 47.603161][T10168] do_sendfile+0x5e0/0xcf0 [ 47.609247][T10168] __x64_sys_sendfile64+0xa9/0x130 [ 47.614388][T10168] do_syscall_64+0x39/0x80 [ 47.618808][T10168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.625645][T10168] [ 47.628062][T10168] read to 0xffff88814461f710 of 8 bytes by task 10168 on cpu 0: [ 47.635673][T10168] ext4_fc_commit+0x1c8/0x19d0 [ 47.640599][T10168] ext4_sync_file+0x336/0x6e0 [ 47.645367][T10168] vfs_fsync_range+0x107/0x120 [ 47.650222][T10168] ext4_buffered_write_iter+0x38f/0x3e0 [ 47.655770][T10168] ext4_file_write_iter+0x47a/0x1060 [ 47.661070][T10168] do_iter_readv_writev+0x2cb/0x360 [ 47.666449][T10168] do_iter_write+0x112/0x4c0 [ 47.671039][T10168] vfs_iter_write+0x4c/0x70 [ 47.675666][T10168] iter_file_splice_write+0x41a/0x770 [ 47.681098][T10168] direct_splice_actor+0x80/0xa0 [ 47.686150][T10168] splice_direct_to_actor+0x345/0x650 [ 47.691529][T10168] do_splice_direct+0xf5/0x170 [ 47.696391][T10168] do_sendfile+0x5e0/0xcf0 [ 47.701334][T10168] __x64_sys_sendfile64+0xa9/0x130 [ 47.706547][T10168] do_syscall_64+0x39/0x80 [ 47.710967][T10168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.716864][T10168] [ 47.719336][T10168] Reported by Kernel Concurrency Sanitizer on: [ 47.725870][T10168] CPU: 0 PID: 10168 Comm: syz-executor.3 Not tainted 5.11.0-rc7-syzkaller #0 [ 47.734735][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.744818][T10168] ================================================================== [ 47.752878][T10168] Kernel panic - not syncing: panic_on_warn set ... [ 47.759456][T10168] CPU: 0 PID: 10168 Comm: syz-executor.3 Not tainted 5.11.0-rc7-syzkaller #0 [ 47.768305][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.778384][T10168] Call Trace: [ 47.781754][T10168] dump_stack+0x116/0x15d [ 47.786088][T10168] panic+0x1e7/0x5fa [ 47.789967][T10168] ? vprintk_emit+0x2e2/0x360 [ 47.794819][T10168] kcsan_report+0x67b/0x680 [ 47.799377][T10168] ? blk_mq_run_hw_queue+0x231/0x260 [ 47.805036][T10168] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 47.810569][T10168] ? ext4_fc_commit+0x1c8/0x19d0 [ 47.815531][T10168] ? ext4_sync_file+0x336/0x6e0 [ 47.820400][T10168] ? vfs_fsync_range+0x107/0x120 [ 47.825432][T10168] ? ext4_buffered_write_iter+0x38f/0x3e0 [ 47.831207][T10168] ? ext4_file_write_iter+0x47a/0x1060 [ 47.836675][T10168] ? do_iter_readv_writev+0x2cb/0x360 [ 47.842134][T10168] ? do_iter_write+0x112/0x4c0 [ 47.846892][T10168] ? vfs_iter_write+0x4c/0x70 [ 47.851563][T10168] ? iter_file_splice_write+0x41a/0x770 [ 47.857189][T10168] ? direct_splice_actor+0x80/0xa0 [ 47.862300][T10168] ? splice_direct_to_actor+0x345/0x650 [ 47.867837][T10168] ? do_splice_direct+0xf5/0x170 [ 47.872779][T10168] ? do_sendfile+0x5e0/0xcf0 [ 47.877513][T10168] ? __x64_sys_sendfile64+0xa9/0x130 [ 47.882829][T10168] ? do_syscall_64+0x39/0x80 [ 47.887796][T10168] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.894218][T10168] ? schedule+0x7f/0xb0 [ 47.898494][T10168] kcsan_setup_watchpoint+0x472/0x4d0 [ 47.903960][T10168] ext4_fc_commit+0x1c8/0x19d0 [ 47.908754][T10168] ? __pagevec_release+0xaf/0xd0 [ 47.914348][T10168] ? errseq_check+0x1f/0x40 [ 47.918842][T10168] ? file_check_and_advance_wb_err+0x9e/0x170 [ 47.925093][T10168] ? jbd2_trans_will_send_data_barrier+0x7e/0x1c0 [ 47.931501][T10168] ext4_sync_file+0x336/0x6e0 [ 47.936392][T10168] ? tsan.module_ctor+0x10/0x10 [ 47.941232][T10168] vfs_fsync_range+0x107/0x120 [ 47.945987][T10168] ext4_buffered_write_iter+0x38f/0x3e0 [ 47.951578][T10168] ext4_file_write_iter+0x47a/0x1060 [ 47.957081][T10168] ? generic_file_buffered_read+0x981/0x9c0 [ 47.963074][T10168] do_iter_readv_writev+0x2cb/0x360 [ 47.968570][T10168] do_iter_write+0x112/0x4c0 [ 47.973196][T10168] ? kmalloc_array+0x2d/0x40 [ 47.977873][T10168] vfs_iter_write+0x4c/0x70 [ 47.982635][T10168] iter_file_splice_write+0x41a/0x770 [ 47.988101][T10168] ? splice_from_pipe+0xc0/0xc0 [ 47.992966][T10168] direct_splice_actor+0x80/0xa0 [ 47.997909][T10168] splice_direct_to_actor+0x345/0x650 [ 48.003286][T10168] ? do_splice_direct+0x170/0x170 [ 48.008323][T10168] do_splice_direct+0xf5/0x170 [ 48.013259][T10168] do_sendfile+0x5e0/0xcf0 [ 48.017718][T10168] __x64_sys_sendfile64+0xa9/0x130 [ 48.022819][T10168] do_syscall_64+0x39/0x80 [ 48.027335][T10168] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.033267][T10168] RIP: 0033:0x465b09 [ 48.037165][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 48.057993][T10168] RSP: 002b:00007f613437c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 48.066507][T10168] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465b09 [ 48.074585][T10168] RDX: 0000000020000100 RSI: 0000000000000006 RDI: 0000000000000006 [ 48.083011][T10168] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 48.090963][T10168] R10: 00008080ffffff7e R11: 0000000000000246 R12: 000000000056c008 [ 48.098942][T10168] R13: 00007ffc8984e24f R14: 00007f613437c300 R15: 0000000000022000 [ 48.108115][T10168] Kernel Offset: disabled [ 48.112439][T10168] Rebooting in 86400 seconds..