Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2021/02/03 17:24:26 fuzzer started 2021/02/03 17:24:27 dialing manager at 10.128.0.169:46241 2021/02/03 17:24:27 syscalls: 3466 2021/02/03 17:24:27 code coverage: enabled 2021/02/03 17:24:27 comparison tracing: enabled 2021/02/03 17:24:27 extra coverage: enabled 2021/02/03 17:24:27 setuid sandbox: enabled 2021/02/03 17:24:27 namespace sandbox: enabled 2021/02/03 17:24:27 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/03 17:24:27 fault injection: enabled 2021/02/03 17:24:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/03 17:24:27 net packet injection: enabled 2021/02/03 17:24:27 net device setup: enabled 2021/02/03 17:24:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/02/03 17:24:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/03 17:24:27 USB emulation: enabled 2021/02/03 17:24:27 hci packet injection: enabled 2021/02/03 17:24:27 wifi device emulation: enabled 2021/02/03 17:24:27 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/03 17:24:27 fetching corpus: 50, signal 45487/49181 (executing program) 2021/02/03 17:24:27 fetching corpus: 100, signal 71510/76774 (executing program) 2021/02/03 17:24:27 fetching corpus: 150, signal 86736/93544 (executing program) 2021/02/03 17:24:27 fetching corpus: 200, signal 104234/112464 (executing program) 2021/02/03 17:24:28 fetching corpus: 250, signal 118587/128137 (executing program) 2021/02/03 17:24:28 fetching corpus: 300, signal 128136/139064 (executing program) 2021/02/03 17:24:28 fetching corpus: 350, signal 140049/152207 (executing program) 2021/02/03 17:24:28 fetching corpus: 400, signal 151381/164708 (executing program) 2021/02/03 17:24:28 fetching corpus: 450, signal 160025/174572 (executing program) 2021/02/03 17:24:28 fetching corpus: 500, signal 167735/183485 (executing program) 2021/02/03 17:24:28 fetching corpus: 550, signal 174155/191068 (executing program) 2021/02/03 17:24:29 fetching corpus: 600, signal 182008/199995 (executing program) 2021/02/03 17:24:29 fetching corpus: 650, signal 187583/206695 (executing program) 2021/02/03 17:24:29 fetching corpus: 700, signal 193374/213552 (executing program) 2021/02/03 17:24:29 fetching corpus: 750, signal 201486/222588 (executing program) 2021/02/03 17:24:29 fetching corpus: 800, signal 206861/228961 (executing program) 2021/02/03 17:24:29 fetching corpus: 850, signal 213194/236173 (executing program) 2021/02/03 17:24:29 fetching corpus: 900, signal 218116/242093 (executing program) 2021/02/03 17:24:30 fetching corpus: 950, signal 223317/248204 (executing program) 2021/02/03 17:24:30 fetching corpus: 1000, signal 227558/253384 (executing program) 2021/02/03 17:24:30 fetching corpus: 1050, signal 230004/256922 (executing program) 2021/02/03 17:24:30 fetching corpus: 1100, signal 236471/264120 (executing program) 2021/02/03 17:24:30 fetching corpus: 1150, signal 243187/271542 (executing program) 2021/02/03 17:24:30 fetching corpus: 1200, signal 248288/277383 (executing program) 2021/02/03 17:24:30 fetching corpus: 1250, signal 251847/281822 (executing program) 2021/02/03 17:24:31 fetching corpus: 1300, signal 255163/285969 (executing program) 2021/02/03 17:24:31 fetching corpus: 1350, signal 257675/289418 (executing program) 2021/02/03 17:24:31 fetching corpus: 1400, signal 261003/293578 (executing program) 2021/02/03 17:24:31 fetching corpus: 1450, signal 264684/298026 (executing program) 2021/02/03 17:24:31 fetching corpus: 1500, signal 268979/302973 (executing program) 2021/02/03 17:24:31 fetching corpus: 1550, signal 272817/307453 (executing program) 2021/02/03 17:24:31 fetching corpus: 1600, signal 276057/311412 (executing program) 2021/02/03 17:24:32 fetching corpus: 1650, signal 279872/315817 (executing program) 2021/02/03 17:24:32 fetching corpus: 1700, signal 283714/320288 (executing program) 2021/02/03 17:24:32 fetching corpus: 1750, signal 286625/323942 (executing program) 2021/02/03 17:24:32 fetching corpus: 1800, signal 290086/328052 (executing program) 2021/02/03 17:24:32 fetching corpus: 1850, signal 292735/331427 (executing program) 2021/02/03 17:24:32 fetching corpus: 1900, signal 295448/334782 (executing program) 2021/02/03 17:24:32 fetching corpus: 1950, signal 298100/338026 (executing program) 2021/02/03 17:24:33 fetching corpus: 2000, signal 300753/341289 (executing program) 2021/02/03 17:24:33 fetching corpus: 2050, signal 303652/344805 (executing program) 2021/02/03 17:24:33 fetching corpus: 2100, signal 306732/348407 (executing program) 2021/02/03 17:24:33 fetching corpus: 2150, signal 308506/350884 (executing program) 2021/02/03 17:24:33 fetching corpus: 2200, signal 312106/354923 (executing program) 2021/02/03 17:24:33 fetching corpus: 2250, signal 315231/358561 (executing program) 2021/02/03 17:24:33 fetching corpus: 2300, signal 318166/361951 (executing program) 2021/02/03 17:24:33 fetching corpus: 2350, signal 321126/365408 (executing program) 2021/02/03 17:24:34 fetching corpus: 2400, signal 323377/368200 (executing program) 2021/02/03 17:24:34 fetching corpus: 2450, signal 325809/371100 (executing program) 2021/02/03 17:24:34 fetching corpus: 2500, signal 327570/373422 (executing program) 2021/02/03 17:24:34 fetching corpus: 2550, signal 329162/375660 (executing program) 2021/02/03 17:24:34 fetching corpus: 2600, signal 330912/377983 (executing program) 2021/02/03 17:24:34 fetching corpus: 2650, signal 333018/380602 (executing program) 2021/02/03 17:24:34 fetching corpus: 2700, signal 335814/383746 (executing program) 2021/02/03 17:24:34 fetching corpus: 2750, signal 337743/386154 (executing program) 2021/02/03 17:24:35 fetching corpus: 2800, signal 340344/389092 (executing program) 2021/02/03 17:24:35 fetching corpus: 2850, signal 343578/392613 (executing program) 2021/02/03 17:24:35 fetching corpus: 2900, signal 345482/394995 (executing program) 2021/02/03 17:24:35 fetching corpus: 2950, signal 347631/397529 (executing program) 2021/02/03 17:24:35 fetching corpus: 3000, signal 349935/400164 (executing program) 2021/02/03 17:24:35 fetching corpus: 3050, signal 352635/403081 (executing program) 2021/02/03 17:24:36 fetching corpus: 3100, signal 354780/405567 (executing program) 2021/02/03 17:24:36 fetching corpus: 3150, signal 356664/407855 (executing program) 2021/02/03 17:24:36 fetching corpus: 3200, signal 357847/409587 (executing program) 2021/02/03 17:24:36 fetching corpus: 3250, signal 359791/411960 (executing program) 2021/02/03 17:24:36 fetching corpus: 3300, signal 361625/414173 (executing program) 2021/02/03 17:24:36 fetching corpus: 3350, signal 363426/416364 (executing program) 2021/02/03 17:24:37 fetching corpus: 3400, signal 365128/418422 (executing program) 2021/02/03 17:24:37 fetching corpus: 3450, signal 366627/420387 (executing program) 2021/02/03 17:24:37 fetching corpus: 3500, signal 369206/423111 (executing program) 2021/02/03 17:24:37 fetching corpus: 3550, signal 371264/425423 (executing program) 2021/02/03 17:24:37 fetching corpus: 3600, signal 373420/427796 (executing program) 2021/02/03 17:24:37 fetching corpus: 3650, signal 375237/429929 (executing program) 2021/02/03 17:24:37 fetching corpus: 3700, signal 376574/431648 (executing program) 2021/02/03 17:24:38 fetching corpus: 3750, signal 378061/433495 (executing program) 2021/02/03 17:24:38 fetching corpus: 3800, signal 379872/435644 (executing program) 2021/02/03 17:24:38 fetching corpus: 3850, signal 381809/437824 (executing program) 2021/02/03 17:24:38 fetching corpus: 3900, signal 383081/439448 (executing program) 2021/02/03 17:24:38 fetching corpus: 3950, signal 384613/441265 (executing program) 2021/02/03 17:24:38 fetching corpus: 4000, signal 386380/443260 (executing program) 2021/02/03 17:24:38 fetching corpus: 4050, signal 388018/445124 (executing program) 2021/02/03 17:24:38 fetching corpus: 4100, signal 389101/446669 (executing program) 2021/02/03 17:24:39 fetching corpus: 4150, signal 390208/448116 (executing program) 2021/02/03 17:24:39 fetching corpus: 4200, signal 391874/449994 (executing program) 2021/02/03 17:24:39 fetching corpus: 4250, signal 393115/451536 (executing program) 2021/02/03 17:24:39 fetching corpus: 4300, signal 395098/453602 (executing program) 2021/02/03 17:24:39 fetching corpus: 4350, signal 396358/455193 (executing program) 2021/02/03 17:24:40 fetching corpus: 4400, signal 398302/457286 (executing program) 2021/02/03 17:24:40 fetching corpus: 4450, signal 399740/458963 (executing program) 2021/02/03 17:24:40 fetching corpus: 4500, signal 401329/460722 (executing program) 2021/02/03 17:24:40 fetching corpus: 4550, signal 402529/462196 (executing program) 2021/02/03 17:24:40 fetching corpus: 4600, signal 404280/464081 (executing program) 2021/02/03 17:24:40 fetching corpus: 4650, signal 405672/465637 (executing program) 2021/02/03 17:24:40 fetching corpus: 4700, signal 407082/467229 (executing program) 2021/02/03 17:24:40 fetching corpus: 4750, signal 408640/468941 (executing program) 2021/02/03 17:24:41 fetching corpus: 4800, signal 410387/470742 (executing program) 2021/02/03 17:24:41 fetching corpus: 4850, signal 411883/472377 (executing program) 2021/02/03 17:24:41 fetching corpus: 4900, signal 413319/473974 (executing program) 2021/02/03 17:24:41 fetching corpus: 4950, signal 414251/475222 (executing program) 2021/02/03 17:24:41 fetching corpus: 5000, signal 415040/476369 (executing program) 2021/02/03 17:24:41 fetching corpus: 5050, signal 416230/477739 (executing program) 2021/02/03 17:24:41 fetching corpus: 5100, signal 418017/479534 (executing program) 2021/02/03 17:24:42 fetching corpus: 5150, signal 418942/480730 (executing program) 2021/02/03 17:24:42 fetching corpus: 5200, signal 420095/482026 (executing program) 2021/02/03 17:24:42 fetching corpus: 5250, signal 420931/483107 (executing program) 2021/02/03 17:24:42 fetching corpus: 5300, signal 422449/484679 (executing program) 2021/02/03 17:24:42 fetching corpus: 5350, signal 423446/485881 (executing program) 2021/02/03 17:24:42 fetching corpus: 5400, signal 425202/487555 (executing program) 2021/02/03 17:24:42 fetching corpus: 5450, signal 426403/488842 (executing program) 2021/02/03 17:24:42 fetching corpus: 5500, signal 427263/489925 (executing program) 2021/02/03 17:24:43 fetching corpus: 5550, signal 428574/491329 (executing program) 2021/02/03 17:24:43 fetching corpus: 5600, signal 429719/492547 (executing program) 2021/02/03 17:24:43 fetching corpus: 5650, signal 430775/493783 (executing program) 2021/02/03 17:24:43 fetching corpus: 5700, signal 431863/494961 (executing program) 2021/02/03 17:24:43 fetching corpus: 5750, signal 432800/496114 (executing program) 2021/02/03 17:24:43 fetching corpus: 5800, signal 434191/497511 (executing program) 2021/02/03 17:24:44 fetching corpus: 5850, signal 435254/498714 (executing program) 2021/02/03 17:24:44 fetching corpus: 5900, signal 436278/499890 (executing program) 2021/02/03 17:24:44 fetching corpus: 5950, signal 437358/501096 (executing program) 2021/02/03 17:24:44 fetching corpus: 6000, signal 438383/502234 (executing program) 2021/02/03 17:24:44 fetching corpus: 6050, signal 439157/503215 (executing program) 2021/02/03 17:24:44 fetching corpus: 6100, signal 440592/504565 (executing program) 2021/02/03 17:24:44 fetching corpus: 6150, signal 441394/505562 (executing program) 2021/02/03 17:24:44 fetching corpus: 6200, signal 442268/506588 (executing program) 2021/02/03 17:24:45 fetching corpus: 6250, signal 443257/507623 (executing program) 2021/02/03 17:24:45 fetching corpus: 6300, signal 444564/508884 (executing program) 2021/02/03 17:24:45 fetching corpus: 6350, signal 445599/509948 (executing program) 2021/02/03 17:24:45 fetching corpus: 6400, signal 446573/510990 (executing program) 2021/02/03 17:24:45 fetching corpus: 6450, signal 447995/512228 (executing program) 2021/02/03 17:24:45 fetching corpus: 6500, signal 449141/513371 (executing program) 2021/02/03 17:24:45 fetching corpus: 6550, signal 450257/514449 (executing program) 2021/02/03 17:24:45 fetching corpus: 6600, signal 451220/515461 (executing program) 2021/02/03 17:24:46 fetching corpus: 6650, signal 452280/516559 (executing program) 2021/02/03 17:24:46 fetching corpus: 6700, signal 453253/517572 (executing program) 2021/02/03 17:24:46 fetching corpus: 6750, signal 454196/518564 (executing program) 2021/02/03 17:24:46 fetching corpus: 6800, signal 455469/519714 (executing program) 2021/02/03 17:24:46 fetching corpus: 6850, signal 456131/520551 (executing program) 2021/02/03 17:24:46 fetching corpus: 6900, signal 456862/521468 (executing program) 2021/02/03 17:24:46 fetching corpus: 6950, signal 457782/522440 (executing program) 2021/02/03 17:24:47 fetching corpus: 7000, signal 458968/523527 (executing program) 2021/02/03 17:24:47 fetching corpus: 7050, signal 459968/524508 (executing program) 2021/02/03 17:24:47 fetching corpus: 7100, signal 460833/525462 (executing program) 2021/02/03 17:24:47 fetching corpus: 7150, signal 461824/526394 (executing program) 2021/02/03 17:24:47 fetching corpus: 7200, signal 462516/527211 (executing program) 2021/02/03 17:24:47 fetching corpus: 7250, signal 463309/528063 (executing program) 2021/02/03 17:24:47 fetching corpus: 7300, signal 464288/529011 (executing program) 2021/02/03 17:24:48 fetching corpus: 7350, signal 465751/530203 (executing program) 2021/02/03 17:24:48 fetching corpus: 7400, signal 466520/531023 (executing program) 2021/02/03 17:24:48 fetching corpus: 7450, signal 467512/531938 (executing program) 2021/02/03 17:24:48 fetching corpus: 7500, signal 468380/532823 (executing program) 2021/02/03 17:24:48 fetching corpus: 7550, signal 469221/533651 (executing program) 2021/02/03 17:24:48 fetching corpus: 7600, signal 469999/534446 (executing program) 2021/02/03 17:24:48 fetching corpus: 7650, signal 471102/535406 (executing program) 2021/02/03 17:24:48 fetching corpus: 7700, signal 472014/536263 (executing program) 2021/02/03 17:24:49 fetching corpus: 7750, signal 472867/537094 (executing program) 2021/02/03 17:24:49 fetching corpus: 7800, signal 473631/537864 (executing program) 2021/02/03 17:24:49 fetching corpus: 7850, signal 474536/538698 (executing program) 2021/02/03 17:24:49 fetching corpus: 7900, signal 475161/539388 (executing program) 2021/02/03 17:24:49 fetching corpus: 7950, signal 475914/540142 (executing program) 2021/02/03 17:24:49 fetching corpus: 8000, signal 476764/540930 (executing program) 2021/02/03 17:24:49 fetching corpus: 8050, signal 477229/541552 (executing program) 2021/02/03 17:24:49 fetching corpus: 8100, signal 477989/542322 (executing program) 2021/02/03 17:24:49 fetching corpus: 8150, signal 478674/542979 (executing program) 2021/02/03 17:24:50 fetching corpus: 8200, signal 479735/543819 (executing program) 2021/02/03 17:24:50 fetching corpus: 8250, signal 480485/544521 (executing program) 2021/02/03 17:24:50 fetching corpus: 8300, signal 481358/545326 (executing program) 2021/02/03 17:24:50 fetching corpus: 8350, signal 482412/546191 (executing program) 2021/02/03 17:24:50 fetching corpus: 8400, signal 483290/546940 (executing program) 2021/02/03 17:24:50 fetching corpus: 8450, signal 483975/547578 (executing program) 2021/02/03 17:24:51 fetching corpus: 8500, signal 485031/548425 (executing program) 2021/02/03 17:24:51 fetching corpus: 8550, signal 485953/549163 (executing program) 2021/02/03 17:24:51 fetching corpus: 8600, signal 486674/549864 (executing program) 2021/02/03 17:24:51 fetching corpus: 8650, signal 487492/550565 (executing program) 2021/02/03 17:24:51 fetching corpus: 8700, signal 488218/551211 (executing program) 2021/02/03 17:24:51 fetching corpus: 8750, signal 488874/551845 (executing program) 2021/02/03 17:24:51 fetching corpus: 8800, signal 489493/552440 (executing program) 2021/02/03 17:24:52 fetching corpus: 8850, signal 490372/553153 (executing program) 2021/02/03 17:24:52 fetching corpus: 8900, signal 490909/553744 (executing program) 2021/02/03 17:24:52 fetching corpus: 8950, signal 491520/554321 (executing program) 2021/02/03 17:24:52 fetching corpus: 9000, signal 492637/555105 (executing program) 2021/02/03 17:24:52 fetching corpus: 9050, signal 493243/555685 (executing program) 2021/02/03 17:24:52 fetching corpus: 9100, signal 494098/556328 (executing program) 2021/02/03 17:24:52 fetching corpus: 9150, signal 494886/556961 (executing program) 2021/02/03 17:24:53 fetching corpus: 9200, signal 495784/557623 (executing program) 2021/02/03 17:24:53 fetching corpus: 9250, signal 496457/558231 (executing program) 2021/02/03 17:24:53 fetching corpus: 9300, signal 497460/558930 (executing program) 2021/02/03 17:24:53 fetching corpus: 9350, signal 498257/559583 (executing program) 2021/02/03 17:24:53 fetching corpus: 9400, signal 499263/560268 (executing program) 2021/02/03 17:24:53 fetching corpus: 9450, signal 500244/560921 (executing program) 2021/02/03 17:24:53 fetching corpus: 9500, signal 500895/561459 (executing program) 2021/02/03 17:24:53 fetching corpus: 9550, signal 502008/562142 (executing program) 2021/02/03 17:24:54 fetching corpus: 9600, signal 502794/562746 (executing program) 2021/02/03 17:24:54 fetching corpus: 9650, signal 503594/563327 (executing program) 2021/02/03 17:24:54 fetching corpus: 9700, signal 503944/563753 (executing program) 2021/02/03 17:24:54 fetching corpus: 9750, signal 504698/564300 (executing program) 2021/02/03 17:24:54 fetching corpus: 9800, signal 505609/564936 (executing program) 2021/02/03 17:24:54 fetching corpus: 9850, signal 506414/565484 (executing program) 2021/02/03 17:24:54 fetching corpus: 9900, signal 507215/566075 (executing program) 2021/02/03 17:24:55 fetching corpus: 9949, signal 507922/566643 (executing program) 2021/02/03 17:24:55 fetching corpus: 9999, signal 508522/567087 (executing program) 2021/02/03 17:24:55 fetching corpus: 10049, signal 509100/567574 (executing program) 2021/02/03 17:24:55 fetching corpus: 10099, signal 509669/568031 (executing program) 2021/02/03 17:24:55 fetching corpus: 10149, signal 510331/568511 (executing program) 2021/02/03 17:24:55 fetching corpus: 10199, signal 510940/568981 (executing program) 2021/02/03 17:24:55 fetching corpus: 10249, signal 511724/569499 (executing program) 2021/02/03 17:24:55 fetching corpus: 10299, signal 512250/569946 (executing program) 2021/02/03 17:24:56 fetching corpus: 10349, signal 512829/570391 (executing program) 2021/02/03 17:24:56 fetching corpus: 10399, signal 513417/570830 (executing program) 2021/02/03 17:24:56 fetching corpus: 10449, signal 514153/571338 (executing program) 2021/02/03 17:24:56 fetching corpus: 10499, signal 514814/571816 (executing program) 2021/02/03 17:24:56 fetching corpus: 10548, signal 515517/572269 (executing program) 2021/02/03 17:24:56 fetching corpus: 10598, signal 516056/572709 (executing program) 2021/02/03 17:24:56 fetching corpus: 10648, signal 516967/573232 (executing program) 2021/02/03 17:24:57 fetching corpus: 10698, signal 517370/573637 (executing program) 2021/02/03 17:24:57 fetching corpus: 10748, signal 518047/574120 (executing program) 2021/02/03 17:24:57 fetching corpus: 10798, signal 518897/574618 (executing program) 2021/02/03 17:24:57 fetching corpus: 10848, signal 519816/575082 (executing program) 2021/02/03 17:24:57 fetching corpus: 10898, signal 520469/575523 (executing program) 2021/02/03 17:24:57 fetching corpus: 10948, signal 521057/575955 (executing program) 2021/02/03 17:24:57 fetching corpus: 10998, signal 521672/576339 (executing program) 2021/02/03 17:24:58 fetching corpus: 11048, signal 522339/576745 (executing program) 2021/02/03 17:24:58 fetching corpus: 11098, signal 522791/577115 (executing program) 2021/02/03 17:24:58 fetching corpus: 11148, signal 523441/577500 (executing program) 2021/02/03 17:24:58 fetching corpus: 11198, signal 524214/577926 (executing program) 2021/02/03 17:24:58 fetching corpus: 11248, signal 524737/578268 (executing program) 2021/02/03 17:24:58 fetching corpus: 11298, signal 525786/578753 (executing program) 2021/02/03 17:24:58 fetching corpus: 11348, signal 526566/579161 (executing program) 2021/02/03 17:24:59 fetching corpus: 11398, signal 527244/579560 (executing program) 2021/02/03 17:24:59 fetching corpus: 11448, signal 527689/579882 (executing program) 2021/02/03 17:24:59 fetching corpus: 11498, signal 528430/580284 (executing program) 2021/02/03 17:24:59 fetching corpus: 11548, signal 529621/580797 (executing program) 2021/02/03 17:24:59 fetching corpus: 11598, signal 530351/581155 (executing program) 2021/02/03 17:24:59 fetching corpus: 11648, signal 531133/581472 (executing program) 2021/02/03 17:24:59 fetching corpus: 11698, signal 531616/581792 (executing program) 2021/02/03 17:24:59 fetching corpus: 11748, signal 532137/582107 (executing program) 2021/02/03 17:25:00 fetching corpus: 11798, signal 532852/582444 (executing program) 2021/02/03 17:25:00 fetching corpus: 11848, signal 533568/582821 (executing program) 2021/02/03 17:25:00 fetching corpus: 11898, signal 534315/583166 (executing program) 2021/02/03 17:25:00 fetching corpus: 11948, signal 534748/583455 (executing program) 2021/02/03 17:25:00 fetching corpus: 11998, signal 535271/583773 (executing program) 2021/02/03 17:25:00 fetching corpus: 12048, signal 535799/584053 (executing program) 2021/02/03 17:25:00 fetching corpus: 12098, signal 536546/584405 (executing program) 2021/02/03 17:25:00 fetching corpus: 12148, signal 537064/584685 (executing program) 2021/02/03 17:25:01 fetching corpus: 12198, signal 537734/585021 (executing program) 2021/02/03 17:25:01 fetching corpus: 12248, signal 538484/585354 (executing program) 2021/02/03 17:25:01 fetching corpus: 12298, signal 538985/585645 (executing program) 2021/02/03 17:25:01 fetching corpus: 12348, signal 539738/585954 (executing program) 2021/02/03 17:25:01 fetching corpus: 12398, signal 540525/586261 (executing program) 2021/02/03 17:25:01 fetching corpus: 12448, signal 540957/586542 (executing program) 2021/02/03 17:25:01 fetching corpus: 12498, signal 541727/586831 (executing program) 2021/02/03 17:25:01 fetching corpus: 12548, signal 542198/587069 (executing program) 2021/02/03 17:25:02 fetching corpus: 12598, signal 543052/587393 (executing program) 2021/02/03 17:25:02 fetching corpus: 12648, signal 543760/587646 (executing program) 2021/02/03 17:25:02 fetching corpus: 12698, signal 544235/587887 (executing program) 2021/02/03 17:25:02 fetching corpus: 12748, signal 544842/588164 (executing program) 2021/02/03 17:25:02 fetching corpus: 12798, signal 545250/588400 (executing program) 2021/02/03 17:25:02 fetching corpus: 12848, signal 546085/588668 (executing program) 2021/02/03 17:25:03 fetching corpus: 12898, signal 546704/588916 (executing program) 2021/02/03 17:25:03 fetching corpus: 12948, signal 547261/589157 (executing program) 2021/02/03 17:25:03 fetching corpus: 12998, signal 548120/589440 (executing program) 2021/02/03 17:25:03 fetching corpus: 13048, signal 548943/589696 (executing program) 2021/02/03 17:25:03 fetching corpus: 13098, signal 549395/589899 (executing program) 2021/02/03 17:25:04 fetching corpus: 13148, signal 550389/590155 (executing program) 2021/02/03 17:25:04 fetching corpus: 13198, signal 550786/590332 (executing program) 2021/02/03 17:25:04 fetching corpus: 13248, signal 551403/590551 (executing program) 2021/02/03 17:25:04 fetching corpus: 13298, signal 552108/590783 (executing program) 2021/02/03 17:25:04 fetching corpus: 13348, signal 552556/590970 (executing program) 2021/02/03 17:25:05 fetching corpus: 13398, signal 553297/591164 (executing program) 2021/02/03 17:25:05 fetching corpus: 13447, signal 553634/591345 (executing program) 2021/02/03 17:25:05 fetching corpus: 13497, signal 554706/591599 (executing program) 2021/02/03 17:25:05 fetching corpus: 13547, signal 555355/591781 (executing program) 2021/02/03 17:25:05 fetching corpus: 13597, signal 556075/591963 (executing program) 2021/02/03 17:25:05 fetching corpus: 13647, signal 556449/592106 (executing program) 2021/02/03 17:25:05 fetching corpus: 13697, signal 557061/592267 (executing program) 2021/02/03 17:25:06 fetching corpus: 13747, signal 558152/592468 (executing program) 2021/02/03 17:25:06 fetching corpus: 13797, signal 558706/592630 (executing program) 2021/02/03 17:25:06 fetching corpus: 13847, signal 559142/592791 (executing program) 2021/02/03 17:25:06 fetching corpus: 13897, signal 559936/592968 (executing program) 2021/02/03 17:25:06 fetching corpus: 13947, signal 560482/593100 (executing program) 2021/02/03 17:25:06 fetching corpus: 13997, signal 561124/593249 (executing program) 2021/02/03 17:25:06 fetching corpus: 14047, signal 561594/593391 (executing program) 2021/02/03 17:25:07 fetching corpus: 14097, signal 562075/593531 (executing program) 2021/02/03 17:25:07 fetching corpus: 14147, signal 562582/593677 (executing program) 2021/02/03 17:25:07 fetching corpus: 14197, signal 562873/593804 (executing program) 2021/02/03 17:25:07 fetching corpus: 14247, signal 563600/593935 (executing program) 2021/02/03 17:25:07 fetching corpus: 14297, signal 563990/594056 (executing program) 2021/02/03 17:25:07 fetching corpus: 14347, signal 564448/594178 (executing program) 2021/02/03 17:25:07 fetching corpus: 14397, signal 564831/594285 (executing program) 2021/02/03 17:25:07 fetching corpus: 14447, signal 565290/594395 (executing program) 2021/02/03 17:25:08 fetching corpus: 14497, signal 565737/594518 (executing program) 2021/02/03 17:25:08 fetching corpus: 14547, signal 566145/594616 (executing program) 2021/02/03 17:25:08 fetching corpus: 14597, signal 566817/594724 (executing program) 2021/02/03 17:25:08 fetching corpus: 14647, signal 567305/594842 (executing program) 2021/02/03 17:25:08 fetching corpus: 14697, signal 567666/594927 (executing program) 2021/02/03 17:25:08 fetching corpus: 14747, signal 568289/595098 (executing program) 2021/02/03 17:25:08 fetching corpus: 14797, signal 568935/595185 (executing program) 2021/02/03 17:25:09 fetching corpus: 14847, signal 569307/595240 (executing program) 2021/02/03 17:25:09 fetching corpus: 14897, signal 569569/595240 (executing program) 2021/02/03 17:25:09 fetching corpus: 14947, signal 569957/595251 (executing program) 2021/02/03 17:25:09 fetching corpus: 14997, signal 570336/595251 (executing program) 2021/02/03 17:25:09 fetching corpus: 15047, signal 571454/595251 (executing program) 2021/02/03 17:25:09 fetching corpus: 15097, signal 572208/595251 (executing program) 2021/02/03 17:25:09 fetching corpus: 15147, signal 572732/595265 (executing program) 2021/02/03 17:25:10 fetching corpus: 15197, signal 573166/595270 (executing program) 2021/02/03 17:25:10 fetching corpus: 15247, signal 573657/595270 (executing program) 2021/02/03 17:25:10 fetching corpus: 15296, signal 574136/595277 (executing program) 2021/02/03 17:25:10 fetching corpus: 15346, signal 574565/595277 (executing program) 2021/02/03 17:25:10 fetching corpus: 15396, signal 574966/595277 (executing program) 2021/02/03 17:25:10 fetching corpus: 15446, signal 575291/595290 (executing program) 2021/02/03 17:25:10 fetching corpus: 15496, signal 575767/595290 (executing program) 2021/02/03 17:25:10 fetching corpus: 15546, signal 576139/595290 (executing program) 2021/02/03 17:25:11 fetching corpus: 15596, signal 576553/595290 (executing program) 2021/02/03 17:25:11 fetching corpus: 15646, signal 577151/595290 (executing program) 2021/02/03 17:25:11 fetching corpus: 15696, signal 577735/595291 (executing program) 2021/02/03 17:25:11 fetching corpus: 15746, signal 578307/595293 (executing program) 2021/02/03 17:25:11 fetching corpus: 15796, signal 578871/595293 (executing program) 2021/02/03 17:25:11 fetching corpus: 15846, signal 579258/595293 (executing program) 2021/02/03 17:25:11 fetching corpus: 15896, signal 579629/595293 (executing program) 2021/02/03 17:25:11 fetching corpus: 15946, signal 580017/595293 (executing program) 2021/02/03 17:25:11 fetching corpus: 15995, signal 580417/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16045, signal 580891/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16095, signal 581384/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16145, signal 581904/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16195, signal 582294/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16245, signal 583047/595298 (executing program) 2021/02/03 17:25:12 fetching corpus: 16295, signal 583485/595298 (executing program) 2021/02/03 17:25:13 fetching corpus: 16345, signal 584294/595298 (executing program) 2021/02/03 17:25:13 fetching corpus: 16395, signal 584675/595298 (executing program) 2021/02/03 17:25:13 fetching corpus: 16407, signal 584783/595298 (executing program) 2021/02/03 17:25:13 fetching corpus: 16407, signal 584783/595298 (executing program) 2021/02/03 17:25:14 starting 6 fuzzer processes 17:25:15 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xf7}], 0x4) 17:25:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) 17:25:15 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1ce, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) 17:25:15 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@uid={'uid'}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0x0]}}}}]}) 17:25:16 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) 17:25:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) syzkaller login: [ 120.411373][ T8424] IPVS: ftp: loaded support on port[0] = 21 [ 120.588229][ T8426] IPVS: ftp: loaded support on port[0] = 21 [ 120.819431][ T8428] IPVS: ftp: loaded support on port[0] = 21 [ 120.948381][ T8424] chnl_net:caif_netlink_parms(): no params data found [ 120.991669][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 121.155595][ T8430] IPVS: ftp: loaded support on port[0] = 21 [ 121.328929][ T8424] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.342528][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.350922][ T8424] device bridge_slave_0 entered promiscuous mode [ 121.363801][ T8424] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.370922][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.380784][ T8424] device bridge_slave_1 entered promiscuous mode [ 121.464981][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.472095][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.484781][ T8432] IPVS: ftp: loaded support on port[0] = 21 [ 121.496187][ T8426] device bridge_slave_0 entered promiscuous mode [ 121.521011][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.531098][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.539765][ T8426] device bridge_slave_1 entered promiscuous mode [ 121.566794][ T8424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.581947][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 121.600117][ T8424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.638215][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.680190][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.719937][ T8424] team0: Port device team_slave_0 added [ 121.806299][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 121.825711][ T8424] team0: Port device team_slave_1 added [ 121.851874][ T8426] team0: Port device team_slave_0 added [ 121.917815][ T8426] team0: Port device team_slave_1 added [ 121.967291][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.975127][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.975178][ T8424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.015109][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.015165][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.016239][ T8428] device bridge_slave_0 entered promiscuous mode [ 122.027135][ T8424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.068539][ T8424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.095578][ T8424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.107449][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.114842][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.141079][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.156192][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.163242][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.189359][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.204764][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.211851][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.221451][ T8428] device bridge_slave_1 entered promiscuous mode [ 122.295895][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 122.358610][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.415488][ T8426] device hsr_slave_0 entered promiscuous mode [ 122.435181][ T8426] device hsr_slave_1 entered promiscuous mode [ 122.444840][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.467074][ T8424] device hsr_slave_0 entered promiscuous mode [ 122.474536][ T8424] device hsr_slave_1 entered promiscuous mode [ 122.481100][ T8424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.489129][ T8424] Cannot create hsr debugfs directory [ 122.531652][ T8428] team0: Port device team_slave_0 added [ 122.537603][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 122.548935][ T8428] team0: Port device team_slave_1 added [ 122.560250][ T8430] chnl_net:caif_netlink_parms(): no params data found [ 122.600290][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 122.664097][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.671537][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.700025][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.717123][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.724591][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.751799][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.773693][ T2938] Bluetooth: hci2: command 0x0409 tx timeout [ 122.917290][ T8428] device hsr_slave_0 entered promiscuous mode [ 122.925263][ T8428] device hsr_slave_1 entered promiscuous mode [ 122.931830][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.939586][ T8428] Cannot create hsr debugfs directory [ 122.954011][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 123.092444][ T2938] Bluetooth: hci3: command 0x0409 tx timeout [ 123.099200][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.107924][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.116688][ T8430] device bridge_slave_0 entered promiscuous mode [ 123.158903][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.168133][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.178038][ T8430] device bridge_slave_1 entered promiscuous mode [ 123.198897][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.212147][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.221484][ T8432] device bridge_slave_0 entered promiscuous mode [ 123.260923][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.276168][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.286457][ T8432] device bridge_slave_1 entered promiscuous mode [ 123.332273][ T2938] Bluetooth: hci4: command 0x0409 tx timeout [ 123.334859][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.384428][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.402012][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.457979][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.466235][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.477035][ T8481] device bridge_slave_0 entered promiscuous mode [ 123.488348][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.517563][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.525071][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.536390][ T8481] device bridge_slave_1 entered promiscuous mode [ 123.561038][ T8430] team0: Port device team_slave_0 added [ 123.601832][ T8430] team0: Port device team_slave_1 added [ 123.614077][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.626599][ T8432] team0: Port device team_slave_0 added [ 123.646712][ T8432] team0: Port device team_slave_1 added [ 123.669203][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.721626][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.729023][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.755827][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.782298][ T8426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.801377][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.809407][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.836421][ T19] Bluetooth: hci5: command 0x0409 tx timeout [ 123.837229][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.860958][ T8481] team0: Port device team_slave_0 added [ 123.868140][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.876240][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.905906][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.918364][ T8426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.936205][ T8426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.960192][ T8481] team0: Port device team_slave_1 added [ 123.966801][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.975313][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.002847][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.023676][ T8426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.096802][ T8430] device hsr_slave_0 entered promiscuous mode [ 124.104622][ T8430] device hsr_slave_1 entered promiscuous mode [ 124.111212][ T8430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.120057][ T8430] Cannot create hsr debugfs directory [ 124.130348][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.138475][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.164767][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.187828][ T8432] device hsr_slave_0 entered promiscuous mode [ 124.197487][ T8432] device hsr_slave_1 entered promiscuous mode [ 124.207457][ T8432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.215295][ T8432] Cannot create hsr debugfs directory [ 124.239803][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.247224][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.276653][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.337313][ T8424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.372788][ T3820] Bluetooth: hci0: command 0x041b tx timeout [ 124.390766][ T8424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.417000][ T8481] device hsr_slave_0 entered promiscuous mode [ 124.426901][ T8481] device hsr_slave_1 entered promiscuous mode [ 124.434195][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.441802][ T8481] Cannot create hsr debugfs directory [ 124.453186][ T8424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.525381][ T8424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.619553][ T3820] Bluetooth: hci1: command 0x041b tx timeout [ 124.665534][ T8428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.715757][ T8428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.763366][ T8428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.813929][ T8428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.857358][ T3820] Bluetooth: hci2: command 0x041b tx timeout [ 124.871418][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.890790][ T8430] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.922405][ T8430] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.970806][ T8430] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.981959][ T8430] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.030140][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.039585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.049560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.089524][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.099299][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.109843][ T3820] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.117236][ T3820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.137869][ T8424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.156852][ T8432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.179235][ T8947] Bluetooth: hci3: command 0x041b tx timeout [ 125.193855][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.201911][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.211635][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.220746][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.228066][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.237432][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.247105][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.256874][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.266941][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.279704][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.298140][ T8432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.310067][ T8432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.355976][ T8424] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.373656][ T8432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.392460][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.400229][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.409105][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.419187][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.428545][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.438217][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.447172][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.454323][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.462804][ T2938] Bluetooth: hci4: command 0x041b tx timeout [ 125.470662][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.527951][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.540007][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.549790][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.559171][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.568569][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.575730][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.584688][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.593916][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.610425][ T8426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.625434][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.647776][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.660125][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.670084][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.684768][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.700420][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.708443][ T8481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.726478][ T8481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.748222][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.777032][ T8481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.801952][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.810926][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.820553][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.830269][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.840396][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.867807][ T8481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.879036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.891011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.892448][ T8947] Bluetooth: hci5: command 0x041b tx timeout [ 125.903846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.913971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.930002][ T8424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.942011][ T8424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.967851][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.977182][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.988556][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.998264][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.005458][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.013971][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.023017][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.031200][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.040601][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.049556][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.056709][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.105802][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.114430][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.125892][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.156356][ T8424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.177374][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.185401][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.194544][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.205068][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.237984][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.260761][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.274444][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.288051][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.298122][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.346654][ T8430] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.369216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.378680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.388918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.397824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.416581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.425562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.435785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.444794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.452869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.453430][ T2938] Bluetooth: hci0: command 0x040f tx timeout [ 126.469948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.478594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.487986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.496441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.509708][ T8426] device veth0_vlan entered promiscuous mode [ 126.556170][ T8428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.578453][ T8426] device veth1_vlan entered promiscuous mode [ 126.598790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.607364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.621609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.630666][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.637774][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.646502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.656149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.666021][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.673213][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.691963][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.699448][ T2938] Bluetooth: hci1: command 0x040f tx timeout [ 126.732087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.741131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.750539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.761991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.772078][ T8424] device veth0_vlan entered promiscuous mode [ 126.818144][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.828369][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.837663][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.846626][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.858061][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.866467][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.897900][ T8426] device veth0_macvtap entered promiscuous mode [ 126.927015][ T8424] device veth1_vlan entered promiscuous mode [ 126.932584][ T9729] Bluetooth: hci2: command 0x040f tx timeout [ 126.952609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.960895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.983849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.991374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.001553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.011459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.023300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.036656][ T8426] device veth1_macvtap entered promiscuous mode [ 127.065962][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.077587][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.086478][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.096492][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.106158][ T3820] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.113310][ T3820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.121060][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.130179][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.178522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.187919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.198165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.206776][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.215590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.224712][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.231777][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.239663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.248553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.252569][ T9729] Bluetooth: hci3: command 0x040f tx timeout [ 127.257532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.271594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.327049][ T8430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.341962][ T8430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.362842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.371231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.385648][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.396521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.408713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.418684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.427973][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.436855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.445567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.454524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.464527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.473626][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.482401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.491021][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.492500][ T9729] Bluetooth: hci4: command 0x040f tx timeout [ 127.499785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.521089][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.533350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.544290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.553384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.590393][ T8424] device veth0_macvtap entered promiscuous mode [ 127.601229][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.611390][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.639929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.649779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.660133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.669835][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.682638][ T8424] device veth1_macvtap entered promiscuous mode [ 127.692551][ T8426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.708443][ T8426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.717711][ T8426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.726964][ T8426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.737390][ T8426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.751980][ T8428] device veth0_vlan entered promiscuous mode [ 127.763305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.771542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.780993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.789722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.798328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.807781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.833495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.840998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.850426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.858947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.898039][ T8424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 127.909000][ T8424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.926198][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.937669][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.958124][ T8428] device veth1_vlan entered promiscuous mode [ 127.973081][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.983864][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.996830][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.005856][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.014435][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.022853][ T9729] Bluetooth: hci5: command 0x040f tx timeout [ 128.033720][ T8424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 128.044255][ T8424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.056422][ T8424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.077057][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.089773][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.115652][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.125470][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.140723][ T8424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.150953][ T8424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.162010][ T8424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.171855][ T8424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.246835][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.261745][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.271473][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.281819][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.289005][ T9729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.335517][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.362989][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.371919][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.416051][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.423255][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.435114][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.521137][ T8428] device veth0_macvtap entered promiscuous mode [ 128.533284][ T19] Bluetooth: hci0: command 0x0419 tx timeout [ 128.567902][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.578497][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.590849][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.600519][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.609555][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.618951][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.628617][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.638108][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.647014][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.663202][ T8428] device veth1_macvtap entered promiscuous mode [ 128.688694][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.698083][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.709038][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.718323][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.727537][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.738634][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.747436][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.756751][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.765541][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.774856][ T9729] Bluetooth: hci1: command 0x0419 tx timeout [ 128.795715][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.843339][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.844054][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.880622][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.897792][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.912824][ T8430] device veth0_vlan entered promiscuous mode [ 128.982972][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.991541][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.008638][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.017762][ T9729] Bluetooth: hci2: command 0x0419 tx timeout [ 129.060540][ T8432] device veth0_vlan entered promiscuous mode [ 129.082562][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.088794][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.107123][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.107354][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.135814][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 129.146435][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.159803][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.170706][ T8430] device veth1_vlan entered promiscuous mode [ 129.198878][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.207925][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.217755][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.228371][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.237433][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.246664][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.256806][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.266441][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.274716][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.306679][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.319614][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.326883][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.330849][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.348564][ T9729] Bluetooth: hci3: command 0x0419 tx timeout [ 129.353639][ T8428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 129.365438][ T8428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.377355][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.391298][ T8428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.411313][ T8428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.422608][ T8428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.431449][ T8428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.443688][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.451620][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.459756][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.468667][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.478018][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.494056][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.504520][ T8432] device veth1_vlan entered promiscuous mode [ 129.532996][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.541059][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.544788][ T8430] device veth0_macvtap entered promiscuous mode [ 129.572717][ T9729] Bluetooth: hci4: command 0x0419 tx timeout [ 129.589692][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.605416][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.616275][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.628226][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.665211][ T8430] device veth1_macvtap entered promiscuous mode 17:25:25 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xf7}], 0x4) [ 129.772711][ T8432] device veth0_macvtap entered promiscuous mode [ 129.812547][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.838618][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.848575][ C0] hrtimer: interrupt took 56959 ns [ 129.863228][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.888863][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.989028][ T8432] device veth1_macvtap entered promiscuous mode [ 130.027566][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.052556][ T9729] Bluetooth: hci5: command 0x0419 tx timeout [ 130.086045][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 17:25:26 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xf7}], 0x4) [ 130.142875][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.238287][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.283393][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 130.329179][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.380412][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.484231][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.497302][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.548003][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 17:25:26 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@s={0x5, @SEQ_MIDIPUTC=0xf7}], 0x4) [ 130.619511][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.653506][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 17:25:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 130.689103][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.706360][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.725156][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.745211][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.780943][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 130.805056][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.839699][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1 17:25:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 130.884635][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.906056][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.987683][ T8430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.999791][ T8430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.010288][ T8430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.022027][ T8430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:25:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 131.069125][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.112247][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.150602][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 17:25:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 131.174855][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.192267][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.228996][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.240507][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 131.262225][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.276561][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.300223][ T8481] device veth0_vlan entered promiscuous mode [ 131.406164][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.431849][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 17:25:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 131.468368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.513111][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.525605][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.552187][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.562060][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.573837][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.573857][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.573875][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.573900][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 131.573915][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.575683][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.589454][ T8481] device veth1_vlan entered promiscuous mode [ 131.736475][ T8432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.754361][ T8432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.791667][ T8432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.842237][ T8432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.858908][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.859626][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.860218][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.860859][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.861560][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.954604][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.031491][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.083994][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.119988][ T8481] device veth0_macvtap entered promiscuous mode [ 132.164084][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.184669][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.208261][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.242723][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.252680][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.271039][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.282054][ T8481] device veth1_macvtap entered promiscuous mode [ 132.316710][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.346878][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.359074][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.378181][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.467924][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.469779][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.480810][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.490030][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.506375][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.517784][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.528420][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.545394][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.558547][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.570216][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.581842][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 132.595122][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.615879][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.639182][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.655779][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.703512][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.735621][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.743983][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:25:28 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1ce, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) [ 132.745100][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.779922][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.800797][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.821565][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.841453][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.878230][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.898227][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.910225][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.922851][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 132.934138][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.954450][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.015638][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.025770][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.035636][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.058482][ T8481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.070619][ T8481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.099655][ T8481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.119618][ T8481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.158266][ T515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.182191][ T515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.215129][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:25:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) [ 133.364461][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.403008][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.457376][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.469690][ T36] audit: type=1804 audit(1612373129.597:2): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/0/bus" dev="sda1" ino=14202 res=1 errno=0 [ 133.577368][ T36] audit: type=1804 audit(1612373129.617:3): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/0/bus" dev="sda1" ino=14202 res=1 errno=0 [ 133.578923][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:25:29 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) [ 133.702346][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.725939][ T36] audit: type=1804 audit(1612373129.817:4): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/0/bus" dev="sda1" ino=14202 res=1 errno=0 [ 133.793123][ T36] audit: type=1804 audit(1612373129.817:5): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/0/bus" dev="sda1" ino=14202 res=1 errno=0 [ 134.018589][ T36] audit: type=1804 audit(1612373130.147:6): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/1/bus" dev="sda1" ino=14201 res=1 errno=0 [ 134.127364][ T36] audit: type=1804 audit(1612373130.197:7): pid=9909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/1/bus" dev="sda1" ino=14201 res=1 errno=0 [ 137.315796][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.323729][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.961540][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.442343][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.575016][ T9904] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.584061][ T9904] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.594337][ T9904] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.612335][ T9904] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.729171][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:25:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) 17:25:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) 17:25:43 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e80)={0x14, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:25:43 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1ce, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) 17:25:43 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) 17:25:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) [ 148.178173][ T36] audit: type=1804 audit(1612373144.308:8): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/2/bus" dev="sda1" ino=14197 res=1 errno=0 17:25:44 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1ce, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) [ 148.242288][ T3820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.434849][ T36] audit: type=1804 audit(1612373144.478:9): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/2/bus" dev="sda1" ino=14197 res=1 errno=0 17:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) 17:25:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 17:25:44 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) [ 148.642553][ T3820] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:25:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 17:25:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) [ 148.862614][ T3820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.893221][ T3820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.944996][ T3820] usb 1-1: Product: syz [ 148.998920][ T3820] usb 1-1: Manufacturer: syz [ 149.065256][ T3820] usb 1-1: SerialNumber: syz [ 149.080782][ T36] audit: type=1804 audit(1612373145.208:10): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/4/bus" dev="sda1" ino=14212 res=1 errno=0 17:25:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) [ 149.335710][ T36] audit: type=1804 audit(1612373145.238:11): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/4/bus" dev="sda1" ino=14212 res=1 errno=0 [ 149.439004][ T3820] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 149.639164][ T3820] usb 1-1: USB disconnect, device number 2 17:25:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) [ 150.952048][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd 17:25:47 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) 17:25:47 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) 17:25:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) 17:25:47 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) 17:25:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) [ 151.338985][ T36] audit: type=1804 audit(1612373147.468:12): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/3/bus" dev="sda1" ino=14214 res=1 errno=0 [ 151.392145][ T5] usb 1-1: device not accepting address 3, error -71 [ 151.533022][ T36] audit: type=1804 audit(1612373147.498:13): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/5/bus" dev="sda1" ino=14212 res=1 errno=0 17:25:47 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0), 0x8) [ 151.751877][ T36] audit: type=1804 audit(1612373147.508:14): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir893644483/syzkaller.zFPYiJ/3/bus" dev="sda1" ino=14214 res=1 errno=0 [ 151.952706][ T36] audit: type=1804 audit(1612373147.528:15): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/5/bus" dev="sda1" ino=14212 res=1 errno=0 [ 154.451117][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.458406][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.912759][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.342978][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.497637][ T9945] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.506773][ T9945] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.515778][ T9945] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.526037][ T9945] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 17:26:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 17:26:00 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) 17:26:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0), 0x8) 17:26:00 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000240)=@random={'btrfs.', 'b'}, &(0x7f0000000140)='\x81\x00', 0x2, 0x2) 17:26:00 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7ffbffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@debug={'debug', 0x3d, 0x20000000000b6}}], [], 0x6b}}) 17:26:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 17:26:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0), 0x8) [ 164.915940][ T36] audit: type=1804 audit(1612373161.048:16): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/6/bus" dev="sda1" ino=14214 res=1 errno=0 17:26:01 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7ffbffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@debug={'debug', 0x3d, 0x20000000000b6}}], [], 0x6b}}) 17:26:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:01 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) [ 165.126668][ T36] audit: type=1804 audit(1612373161.078:17): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir236740517/syzkaller.UAApdp/6/bus" dev="sda1" ino=14214 res=1 errno=0 17:26:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/189, 0xbd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffa) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80120018}, 0xc, &(0x7f0000000300)={0x0, 0x5c}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) [ 165.198546][T10030] tipc: Can't bind to reserved service type 1 17:26:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0), 0x8) 17:26:01 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2c060000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x185, 0x0) 17:26:01 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7ffbffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@debug={'debug', 0x3d, 0x20000000000b6}}], [], 0x6b}}) 17:26:01 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@hat={'permhat ', 0x0, 0x5e, ['/+F,$\x00\x04S_%0\xe4%\x0f\xdd\xee\x92\xf7\xd0 \xb3XI\v\x1f\x12\xb6\x17\x04\x0f\xcf\xbe\x05b\x00\a\x06\xfc\a\x00\x00\x00\x00\x00\x00\x00\xdd$r\xf4\xe4k\t(\x02\xcf\xc3\x94\xd3c\x97\xbb\x85\xea\xef\x7f\xea\xf3\xaf\x9d\x9e%\x05\xc8\x13\xab/\xcd\xfc\x99C\xa3\x19\xadJP\xfd\xa6\x1e\xcc=\xaf\xf4\xf8\x11y\xd0Q\xa7\x12\"\x04\x1b\xfc\x87\xf9\xd4\x1a\xd2x\xbe\x00\x00\x00\x00\x00\x00\x00', '/proc/thread-self/attr/current\x00']}, 0xb0) 17:26:01 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:01 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:01 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="ffffffffffffffdd280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffff80}]}}]}, 0x38}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 165.792364][ T36] audit: type=1400 audit(1612373161.918:18): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10049 comm="syz-executor.2" 17:26:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@hat={'permhat ', 0x0, 0x5e, ['/+F,$\x00\x04S_%0\xe4%\x0f\xdd\xee\x92\xf7\xd0 \xb3XI\v\x1f\x12\xb6\x17\x04\x0f\xcf\xbe\x05b\x00\a\x06\xfc\a\x00\x00\x00\x00\x00\x00\x00\xdd$r\xf4\xe4k\t(\x02\xcf\xc3\x94\xd3c\x97\xbb\x85\xea\xef\x7f\xea\xf3\xaf\x9d\x9e%\x05\xc8\x13\xab/\xcd\xfc\x99C\xa3\x19\xadJP\xfd\xa6\x1e\xcc=\xaf\xf4\xf8\x11y\xd0Q\xa7\x12\"\x04\x1b\xfc\x87\xf9\xd4\x1a\xd2x\xbe\x00\x00\x00\x00\x00\x00\x00', '/proc/thread-self/attr/current\x00']}, 0xb0) 17:26:02 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7ffbffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}, {@debug={'debug', 0x3d, 0x20000000000b6}}], [], 0x6b}}) [ 166.047806][ T36] audit: type=1400 audit(1612373162.178:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10064 comm="syz-executor.2" 17:26:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@hat={'permhat ', 0x0, 0x5e, ['/+F,$\x00\x04S_%0\xe4%\x0f\xdd\xee\x92\xf7\xd0 \xb3XI\v\x1f\x12\xb6\x17\x04\x0f\xcf\xbe\x05b\x00\a\x06\xfc\a\x00\x00\x00\x00\x00\x00\x00\xdd$r\xf4\xe4k\t(\x02\xcf\xc3\x94\xd3c\x97\xbb\x85\xea\xef\x7f\xea\xf3\xaf\x9d\x9e%\x05\xc8\x13\xab/\xcd\xfc\x99C\xa3\x19\xadJP\xfd\xa6\x1e\xcc=\xaf\xf4\xf8\x11y\xd0Q\xa7\x12\"\x04\x1b\xfc\x87\xf9\xd4\x1a\xd2x\xbe\x00\x00\x00\x00\x00\x00\x00', '/proc/thread-self/attr/current\x00']}, 0xb0) 17:26:02 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000180)=@hat={'permhat ', 0x0, 0x5e, ['/+F,$\x00\x04S_%0\xe4%\x0f\xdd\xee\x92\xf7\xd0 \xb3XI\v\x1f\x12\xb6\x17\x04\x0f\xcf\xbe\x05b\x00\a\x06\xfc\a\x00\x00\x00\x00\x00\x00\x00\xdd$r\xf4\xe4k\t(\x02\xcf\xc3\x94\xd3c\x97\xbb\x85\xea\xef\x7f\xea\xf3\xaf\x9d\x9e%\x05\xc8\x13\xab/\xcd\xfc\x99C\xa3\x19\xadJP\xfd\xa6\x1e\xcc=\xaf\xf4\xf8\x11y\xd0Q\xa7\x12\"\x04\x1b\xfc\x87\xf9\xd4\x1a\xd2x\xbe\x00\x00\x00\x00\x00\x00\x00', '/proc/thread-self/attr/current\x00']}, 0xb0) [ 166.205440][ T36] audit: type=1400 audit(1612373162.338:20): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10072 comm="syz-executor.2" 17:26:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) [ 166.410774][ T36] audit: type=1400 audit(1612373162.538:21): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10075 comm="syz-executor.2" 17:26:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@int, @var, @volatile, @volatile, @ptr]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 166.837523][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.875204][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:26:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000100)="caf7", 0x0}, 0x20) 17:26:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 17:26:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:03 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000100)="caf7", 0x0}, 0x20) 17:26:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:03 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000013980), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, 0x0}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 17:26:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x1}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) 17:26:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 17:26:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@int, @var, @volatile, @volatile, @ptr]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000100)="caf7", 0x0}, 0x20) 17:26:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 17:26:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 17:26:06 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000013980), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, 0x0}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 17:26:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 169.961674][T10143] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:26:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000100)="caf7", 0x0}, 0x20) 17:26:06 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000013980), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, 0x0}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 17:26:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:06 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x25000989) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) 17:26:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 17:26:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@int, @var, @volatile, @volatile, @ptr]}, {0x0, [0x0]}}, 0x0, 0x5f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:26:09 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000013980), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, 0x0}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 17:26:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:09 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4161, 0x0) 17:26:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 17:26:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x5, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 17:26:09 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4161, 0x0) 17:26:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x378, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001580)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff2ce6, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x5026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/142) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000001c0)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45c00) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 17:26:09 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 17:26:09 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4161, 0x0) [ 173.618673][ T36] audit: type=1804 audit(1612373169.748:22): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir594102253/syzkaller.5Ah2CF/19/bus" dev="sda1" ino=14194 res=1 errno=0 [ 173.651023][T10249] ================================================================== [ 173.659752][T10249] BUG: KASAN: use-after-free in __uprobe_register+0x70f/0x850 [ 173.667604][T10249] Read of size 8 at addr ffff888022a3bd68 by task syz-executor.5/10249 [ 173.675890][T10249] [ 173.678238][T10249] CPU: 1 PID: 10249 Comm: syz-executor.5 Not tainted 5.11.0-rc6-next-20210203-syzkaller #0 [ 173.688425][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.698521][T10249] Call Trace: [ 173.701826][T10249] dump_stack+0x107/0x163 [ 173.706357][T10249] ? __uprobe_register+0x70f/0x850 [ 173.711775][T10249] ? __uprobe_register+0x70f/0x850 [ 173.717197][T10249] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 173.724357][T10249] ? __uprobe_register+0x70f/0x850 [ 173.729838][T10249] ? __uprobe_register+0x70f/0x850 [ 173.735023][T10249] kasan_report.cold+0x7c/0xd8 [ 173.740010][T10249] ? __uprobe_register+0x70f/0x850 [ 173.745944][T10249] __uprobe_register+0x70f/0x850 [ 173.751366][T10249] probe_event_enable+0x357/0xa00 [ 173.756911][T10249] ? probes_write+0x40/0x40 [ 173.761468][T10249] trace_uprobe_register+0x443/0x880 [ 173.767442][T10249] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 173.773281][T10249] ? _find_next_bit.constprop.0+0x1a0/0x200 [ 173.779403][T10249] perf_trace_event_init+0x549/0xa20 [ 173.785282][T10249] perf_uprobe_init+0x16f/0x210 [ 173.790514][T10249] perf_uprobe_event_init+0xff/0x1c0 [ 173.795928][T10249] perf_try_init_event+0x12a/0x560 [ 173.801198][T10249] ? perf_event_alloc.part.0+0xe8c/0x3960 [ 173.806959][T10249] perf_event_alloc.part.0+0xe3b/0x3960 [ 173.812547][T10249] ? lock_downgrade+0x6d0/0x6d0 [ 173.817542][T10249] __do_sys_perf_event_open+0x647/0x2e60 [ 173.823227][T10249] ? build_open_flags+0x6f0/0x6f0 [ 173.828450][T10249] ? perf_event_set_output+0x4c0/0x4c0 [ 173.834499][T10249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 173.841323][T10249] do_syscall_64+0x2d/0x70 [ 173.846239][T10249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 173.852941][T10249] RIP: 0033:0x465b09 [ 173.856954][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.878386][T10249] RSP: 002b:00007f6dba6e0188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 173.887090][T10249] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 173.895353][T10249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 173.916541][T10249] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 173.924835][T10249] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000056bf60 [ 173.933424][T10249] R13: 00007fffb66fd5df R14: 00007f6dba6e0300 R15: 0000000000022000 [ 173.946619][T10249] [ 173.950079][T10249] Allocated by task 10249: [ 173.955938][T10249] kasan_save_stack+0x1b/0x40 [ 173.960748][T10249] ____kasan_kmalloc.constprop.0+0xa0/0xd0 [ 173.966934][T10249] __uprobe_register+0x19c/0x850 [ 173.972025][T10249] probe_event_enable+0x357/0xa00 [ 173.977176][T10249] trace_uprobe_register+0x443/0x880 [ 173.983038][T10249] perf_trace_event_init+0x549/0xa20 [ 173.988575][T10249] perf_uprobe_init+0x16f/0x210 [ 173.993615][T10249] perf_uprobe_event_init+0xff/0x1c0 [ 173.999038][T10249] perf_try_init_event+0x12a/0x560 [ 174.004365][T10249] perf_event_alloc.part.0+0xe3b/0x3960 [ 174.010562][T10249] __do_sys_perf_event_open+0x647/0x2e60 [ 174.016414][T10249] do_syscall_64+0x2d/0x70 [ 174.021198][T10249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 174.027171][T10249] [ 174.029728][T10249] Freed by task 10249: [ 174.034003][T10249] kasan_save_stack+0x1b/0x40 [ 174.038896][T10249] kasan_set_track+0x1c/0x30 [ 174.043916][T10249] kasan_set_free_info+0x20/0x30 [ 174.049022][T10249] ____kasan_slab_free.part.0+0xe1/0x110 [ 174.054943][T10249] slab_free_freelist_hook+0x82/0x1d0 [ 174.060569][T10249] kfree+0xe5/0x7b0 [ 174.064609][T10249] put_uprobe+0x13b/0x190 [ 174.069155][T10249] uprobe_apply+0xfc/0x130 [ 174.073875][T10249] trace_uprobe_register+0x5c9/0x880 [ 174.080128][T10249] perf_trace_event_init+0x17a/0xa20 [ 174.087197][T10249] perf_uprobe_init+0x16f/0x210 [ 174.092312][T10249] perf_uprobe_event_init+0xff/0x1c0 [ 174.097630][T10249] perf_try_init_event+0x12a/0x560 [ 174.103339][T10249] perf_event_alloc.part.0+0xe3b/0x3960 [ 174.110015][T10249] __do_sys_perf_event_open+0x647/0x2e60 [ 174.115767][T10249] do_syscall_64+0x2d/0x70 [ 174.120231][T10249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 174.126165][T10249] [ 174.128526][T10249] The buggy address belongs to the object at ffff888022a3bc00 [ 174.128526][T10249] which belongs to the cache kmalloc-512 of size 512 [ 174.142748][T10249] The buggy address is located 360 bytes inside of [ 174.142748][T10249] 512-byte region [ffff888022a3bc00, ffff888022a3be00) [ 174.156238][T10249] The buggy address belongs to the page: [ 174.162124][T10249] page:000000005ace4f9a refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022a3a800 pfn:0x22a3a [ 174.195752][T10249] head:000000005ace4f9a order:1 compound_mapcount:0 [ 174.202854][T10249] flags: 0xfff00000010200(slab|head) [ 174.208316][T10249] raw: 00fff00000010200 ffffea000045d488 ffffea0000a6d088 ffff888010841c80 [ 174.217165][T10249] raw: ffff888022a3a800 0000000000080003 00000001ffffffff 0000000000000000 [ 174.225891][T10249] page dumped because: kasan: bad access detected [ 174.232362][T10249] [ 174.234799][T10249] Memory state around the buggy address: [ 174.240569][T10249] ffff888022a3bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.248673][T10249] ffff888022a3bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.257295][T10249] >ffff888022a3bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.265539][T10249] ^ [ 174.273034][T10249] ffff888022a3bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.281275][T10249] ffff888022a3be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.289554][T10249] ================================================================== [ 174.297739][T10249] Disabling lock debugging due to kernel taint [ 174.307921][T10249] Kernel panic - not syncing: panic_on_warn set ... [ 174.314976][T10249] CPU: 1 PID: 10249 Comm: syz-executor.5 Tainted: G B 5.11.0-rc6-next-20210203-syzkaller #0 [ 174.326612][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.337117][T10249] Call Trace: [ 174.397866][T10249] dump_stack+0x107/0x163 [ 174.402238][T10249] ? __uprobe_register+0x670/0x850 [ 174.407389][T10249] panic+0x306/0x73d [ 174.411319][T10249] ? __warn_printk+0xf3/0xf3 [ 174.416191][T10249] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 174.422757][T10249] ? trace_hardirqs_on+0x38/0x1c0 [ 174.427845][T10249] ? trace_hardirqs_on+0x51/0x1c0 [ 174.433147][T10249] ? __uprobe_register+0x70f/0x850 [ 174.438299][T10249] ? __uprobe_register+0x70f/0x850 [ 174.443913][T10249] end_report.cold+0x5a/0x5a [ 174.448855][T10249] kasan_report.cold+0x6a/0xd8 [ 174.453646][T10249] ? __uprobe_register+0x70f/0x850 [ 174.459045][T10249] __uprobe_register+0x70f/0x850 [ 174.464099][T10249] probe_event_enable+0x357/0xa00 [ 174.469251][T10249] ? probes_write+0x40/0x40 [ 174.473947][T10249] trace_uprobe_register+0x443/0x880 [ 174.479507][T10249] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 174.485550][T10249] ? _find_next_bit.constprop.0+0x1a0/0x200 [ 174.491592][T10249] perf_trace_event_init+0x549/0xa20 [ 174.497260][T10249] perf_uprobe_init+0x16f/0x210 [ 174.502347][T10249] perf_uprobe_event_init+0xff/0x1c0 [ 174.507882][T10249] perf_try_init_event+0x12a/0x560 [ 174.513282][T10249] ? perf_event_alloc.part.0+0xe8c/0x3960 [ 174.519835][T10249] perf_event_alloc.part.0+0xe3b/0x3960 [ 174.525419][T10249] ? lock_downgrade+0x6d0/0x6d0 [ 174.530300][T10249] __do_sys_perf_event_open+0x647/0x2e60 [ 174.536039][T10249] ? build_open_flags+0x6f0/0x6f0 [ 174.541097][T10249] ? perf_event_set_output+0x4c0/0x4c0 [ 174.546875][T10249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 174.553149][T10249] do_syscall_64+0x2d/0x70 [ 174.558170][T10249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 174.564368][T10249] RIP: 0033:0x465b09 [ 174.568381][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.588733][T10249] RSP: 002b:00007f6dba6e0188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 174.597653][T10249] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465b09 [ 174.605650][T10249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 174.613971][T10249] RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000 [ 174.622089][T10249] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000056bf60 [ 174.630177][T10249] R13: 00007fffb66fd5df R14: 00007f6dba6e0300 R15: 0000000000022000 [ 174.675318][T10249] Kernel Offset: disabled [ 174.680592][T10249] Rebooting in 86400 seconds..