[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.447875] audit: type=1800 audit(1569835462.257:33): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.384625] kauditd_printk_skb: 1 callbacks suppressed [ 45.384640] audit: type=1400 audit(1569835467.197:35): avc: denied { map } for pid=7623 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2019/09/30 09:24:33 fuzzer started [ 51.861268] audit: type=1400 audit(1569835473.667:36): avc: denied { map } for pid=7632 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/30 09:24:34 dialing manager at 10.128.0.105:33829 2019/09/30 09:24:34 syscalls: 2489 2019/09/30 09:24:34 code coverage: enabled 2019/09/30 09:24:34 comparison tracing: enabled 2019/09/30 09:24:34 extra coverage: extra coverage is not supported by the kernel 2019/09/30 09:24:34 setuid sandbox: enabled 2019/09/30 09:24:34 namespace sandbox: enabled 2019/09/30 09:24:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/30 09:24:34 fault injection: enabled 2019/09/30 09:24:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/30 09:24:34 net packet injection: enabled 2019/09/30 09:24:34 net device setup: enabled 09:27:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9f0080000b8f9000000ba000000000f30b9800000c00f3235008000000f3067360f01c32e3e0f79350000000066b88a008ee86d0f72f71c6626f36e360f788fb3000000f4", 0x45}], 0xaaaaaaaaaaaaa01, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 218.365001] audit: type=1400 audit(1569835640.177:37): avc: denied { map } for pid=7649 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4577 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 218.481557] IPVS: ftp: loaded support on port[0] = 21 09:27:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f0214584707f9f4ffffff000000000000001f000000", 0x1c) [ 218.630747] chnl_net:caif_netlink_parms(): no params data found [ 218.701571] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.705317] IPVS: ftp: loaded support on port[0] = 21 [ 218.708621] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.721968] device bridge_slave_0 entered promiscuous mode [ 218.730070] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.737727] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.745224] device bridge_slave_1 entered promiscuous mode 09:27:20 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f0000000080)='\xae\'\xd1\x93E=i\x86\a\xf1\x17\xfa\x861\x13uc\xb2\x06\x93i\x878\xb1\xf0\x8c\xae\xd6\xdb*\xcf7\xc7\\^\xcb(\xb1L\x1f!\x16\xd3D;\bh\xb0\xce\x15Y\x8d\x9f\xad\x87C\xc6A\x03.\xd8\nH\x9f0\x00\x00\x00\x00\x00\x00\xde+^\xc4\x90QA\x94\xda\nbS\xc8\xd5 bx\xe7\x11r@\x94\xffb0\xbe\x1e3\xc6\xab\xa8\x1b', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x291) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0x1}, 0xb) [ 218.784930] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.800779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.838740] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.864174] team0: Port device team_slave_0 added [ 218.871525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.893951] team0: Port device team_slave_1 added [ 218.899330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.913796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 09:27:20 executing program 3: clone(0x808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 218.996387] device hsr_slave_0 entered promiscuous mode [ 219.043540] device hsr_slave_1 entered promiscuous mode [ 219.083779] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 219.129315] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 219.142358] IPVS: ftp: loaded support on port[0] = 21 [ 219.165758] IPVS: ftp: loaded support on port[0] = 21 09:27:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000003ec0)='tls\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x7, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0xa) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0x3, 0x942, 0x7, 0x1, 0x7fffffff}, 0x14) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000380)) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000240)=ANY=[@ANYBLOB="000800000000000006000000000000000900000000000000040000000000000039177f1100000000c4beff020000000000000000000000000000000000000000000000000000000000000000000000003e00000000000000000000000100000000000000000040008109ff6f00000000000000000000000000000000000000000000000000000000000000000000000005000000000000000400000000000000030000000000000005be0140000000000000000000000000000000000000000000000000000000000000000000000000ff030000000000000600000000000000010400000000000000050380000000000000e8ffffff00000000000000000000000000000000000000000000000000000000c40100000000010000000000000008000000000000007f06fe08"]) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 219.210482] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.216974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.223893] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.230231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.239806] chnl_net:caif_netlink_parms(): no params data found [ 219.388034] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.403213] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.410534] device bridge_slave_0 entered promiscuous mode [ 219.466161] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.472666] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.481578] device bridge_slave_1 entered promiscuous mode [ 219.500380] IPVS: ftp: loaded support on port[0] = 21 [ 219.511949] chnl_net:caif_netlink_parms(): no params data found 09:27:21 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f0214584707f9f4ffffff000000000000001f000000", 0x1c) [ 219.552027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.574471] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 219.580590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.611450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.658483] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.678745] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.688399] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 219.715534] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.755200] chnl_net:caif_netlink_parms(): no params data found [ 219.767572] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.774411] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.781287] device bridge_slave_0 entered promiscuous mode [ 219.788349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.795811] team0: Port device team_slave_0 added [ 219.808349] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.809222] IPVS: ftp: loaded support on port[0] = 21 [ 219.830787] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.838053] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.845818] device bridge_slave_1 entered promiscuous mode [ 219.861366] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.871199] team0: Port device team_slave_1 added [ 219.876796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.884103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.900062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 219.907753] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.915294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.924359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.932480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.951659] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.958189] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.965669] device bridge_slave_0 entered promiscuous mode [ 219.972469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.988919] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.995681] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.002692] device bridge_slave_1 entered promiscuous mode [ 220.018642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.034277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.049181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.057274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.065104] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.071469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.078396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.087114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.094892] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.101225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.112238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.120239] team0: Port device team_slave_0 added [ 220.127132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.174950] device hsr_slave_0 entered promiscuous mode [ 220.233516] device hsr_slave_1 entered promiscuous mode [ 220.275552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.284884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.293926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.301190] team0: Port device team_slave_1 added [ 220.307590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.316174] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.336138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.346891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.373038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.389019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.396901] team0: Port device team_slave_0 added [ 220.474972] device hsr_slave_0 entered promiscuous mode [ 220.513904] device hsr_slave_1 entered promiscuous mode [ 220.563910] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.572984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.580038] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.589836] team0: Port device team_slave_1 added [ 220.600068] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.607527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.614653] chnl_net:caif_netlink_parms(): no params data found [ 220.625928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.638158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.665022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.674943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.684849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.692673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.700680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.718364] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.725251] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.732941] device bridge_slave_0 entered promiscuous mode [ 220.751774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.760645] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.770164] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.777238] device bridge_slave_1 entered promiscuous mode [ 220.790101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.798596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.855344] device hsr_slave_0 entered promiscuous mode [ 220.893613] device hsr_slave_1 entered promiscuous mode [ 220.954807] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.962252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.978455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.988144] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.006586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 221.031845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.051012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.058640] team0: Port device team_slave_0 added [ 221.065119] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.073878] team0: Port device team_slave_1 added [ 221.082202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.089961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.100685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 221.126449] chnl_net:caif_netlink_parms(): no params data found [ 221.135966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.158269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.166022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.175452] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.181469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.191130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.198363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.228016] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.234526] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.241589] device bridge_slave_0 entered promiscuous mode [ 221.250680] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.257151] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.264604] device bridge_slave_1 entered promiscuous mode [ 221.283161] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.299215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.354990] device hsr_slave_0 entered promiscuous mode [ 221.393470] device hsr_slave_1 entered promiscuous mode [ 221.433886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.441651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.456083] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.463709] team0: Port device team_slave_0 added [ 221.469264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.477390] team0: Port device team_slave_1 added [ 221.486537] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.502329] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.508758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.520733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.528655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.586206] device hsr_slave_0 entered promiscuous mode [ 221.643654] device hsr_slave_1 entered promiscuous mode [ 221.683924] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.691079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.720352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.734794] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.746115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.760015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.768411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.784448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.785216] audit: type=1400 audit(1569835643.597:38): avc: denied { associate } for pid=7650 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 221.822111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.831941] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.845263] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.853902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.870814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.878175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.886865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.897869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.906195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.920820] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.933916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.939286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 221.940089] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.964369] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.970457] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.992837] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 222.004034] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.010428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.019603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.030170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.039895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.053852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.071849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.079608] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.086026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.093578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.101533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.109255] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.115640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.125605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.139586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.150249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.162454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.184706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 09:27:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9f0080000b8f9000000ba000000000f30b9800000c00f3235008000000f3067360f01c32e3e0f79350000000066b88a008ee86d0f72f71c6626f36e360f788fb3000000f4", 0x45}], 0xaaaaaaaaaaaaa01, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 222.191736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.206240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.220161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.231670] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.238100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.250888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.259519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.272774] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.279237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.291394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.299505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.310095] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.316770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.325968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.334818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.342724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.353835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.361174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.369756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.377984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 09:27:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9f0080000b8f9000000ba000000000f30b9800000c00f3235008000000f3067360f01c32e3e0f79350000000066b88a008ee86d0f72f71c6626f36e360f788fb3000000f4", 0x45}], 0xaaaaaaaaaaaaa01, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 222.391127] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.397592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.410461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.418623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.435452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.445415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.466622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.488431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.498508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.510805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.523842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.539227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.548822] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.571712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.588502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 09:27:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9f0080000b8f9000000ba000000000f30b9800000c00f3235008000000f3067360f01c32e3e0f79350000000066b88a008ee86d0f72f71c6626f36e360f788fb3000000f4", 0x45}], 0xaaaaaaaaaaaaa01, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 222.601209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.612624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.626858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.636737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.648622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.656727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.664351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.675301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.685578] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 222.691735] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.701250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.713896] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.722591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.739405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.750824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.761688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.770307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.778621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.786542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.794513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.804373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.816013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 222.826000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 222.841714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 09:27:24 executing program 0: [ 222.850396] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 222.862114] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.870862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.883997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.894274] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.900680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.909631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.917967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.934219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.942055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 09:27:24 executing program 0: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) close(0xffffffffffffffff) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x18) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x2}], 0x1, 0x24000004) [ 222.951155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.960181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.970755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.990536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.008290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.018584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.028568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.036155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.046460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.054713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.062493] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.068900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.076800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.084663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.092214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.100712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.110546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.118813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.123581] hrtimer: interrupt took 26944 ns [ 223.126782] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.137122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.146608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 09:27:24 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x271ee6fb96a3e66d, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 223.156361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.165850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.176693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.188388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.201209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 223.210912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.219955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.227483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.235935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.244204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.251794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.260139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.267963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.276093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.283969] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.290328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.299877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.308865] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.318567] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.331709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.345484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 09:27:25 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) write$9p(r0, 0x0, 0x0) [ 223.359188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.367871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.382259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.391838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.415573] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.421778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.432569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.458615] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.470806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.495038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.502943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.528424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.538515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.554250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.561617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.570189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.582576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.594713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 223.604729] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 223.613188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.621537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.630114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.638029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.645715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.656795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.673786] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 223.686207] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 223.701792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.717363] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.733885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.741659] audit: type=1400 audit(1569835645.547:39): avc: denied { map } for pid=7705 comm="syz-executor.2" path=2F6D656D66643AAE27D193453D698607F117FA8631137563B20693698738B1F08CAED6DB2ACF37C75C5ECB28B14C1F2116D3443B0868B0CE15598D9FAD8743C641032ED80A489F30202864656C6574656429 dev="tmpfs" ino=28720 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 223.749371] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 223.793469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.801423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.815251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.824136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.835318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 223.845905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.852583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.861524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.870004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.878153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.885976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.900163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.909459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 223.918059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.928867] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.935240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.943771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.952646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.992509] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 224.047347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.047659] ptrace attach of "/root/syz-executor.3"[7659] was attempted by "/root/syz-executor.3"[7714] [ 224.081557] ptrace attach of "/root/syz-executor.3"[7659] was attempted by "/root/syz-executor.3"[7717] 09:27:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0xfffffffffffffffe) 09:27:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="b9f0080000b8f9000000ba000000000f30b9800000c00f3235008000000f3067360f01c32e3e0f79350000000066b88a008ee86d0f72f71c6626f36e360f788fb3000000f4", 0x45}], 0xaaaaaaaaaaaaa01, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:27:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0, 0x2c3}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1bb054d54ac45a333c28785d630fd1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2ec07ed91d53e745a1b28530915018508b8d9d2e61860cf64cf10f6aeee77bfa0a8b59b471db757c2688031c4c9aed23aa465965f1b7ea71edcd4e5535300574d16539766ddfaf61160d7c0a9b82b0dc6fc2483bd3859df044603d030c6c7e5756a8fc1b170258", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0xfffffc2f}, {0x0, 0xfffffdcc}, {0x0}, {&(0x7f0000000580), 0x386}], 0x1000000000000035, 0x0, 0xfffffffffffffe35}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 224.220325] ptrace attach of "/root/syz-executor.2"[7730] was attempted by "/root/syz-executor.2"[7731] [ 224.309928] binder: 7736:7737 ioctl c0306201 9999999999999999 returned -14 09:27:26 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)={[{@resize_auto='resize=auto'}]}) 09:27:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "8f2cb530c4c5131d", "3a6bc8cbf5f0c26e95c106070f435ee6", '\x00', "73d2aaccb759e14d"}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)='\f', 0x1}], 0x1) 09:27:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f0000000340)=[{r0}, {r4, 0x602}], 0x2, 0x0, 0x0, 0x0) 09:27:26 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f0214584707f9f4ffffff000000000000001f000000", 0x1c) 09:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2c880) 09:27:26 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 09:27:26 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) [ 224.832143] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 09:27:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, 0x0) setgid(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x698, 0x278, 0x388, 0x140, 0x490, 0x0, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f0000000240), {[{{@ipv6={@mcast2, @local, [0x0, 0x0, 0x203146b8e4259381, 0x7f], [0xff00007f, 0x1fe, 0x0, 0xffffff00], 'tunl0\x00', 'bcsf0\x00', {}, {0xff}, 0x5c, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@ipv4={[], [], @loopback}, @empty, [0xff000000, 0xffffff00, 0x0, 0xafb958f2c91f676e], [0x0, 0xffffff00], 'ifb0\x00', 'rose0\x00', {}, {}, 0xe055b25aed13a117, 0x2, 0x1, 0x10}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x8, 0x3, 0x1, [0x0, 0x0, 0x2, 0x200, 0x1, 0x4, 0x3ff, 0x0, 0x9, 0xff7f, 0x1, 0x6, 0x800, 0x0, 0x200]}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c}}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@empty, 0x0, 0x23}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 09:27:26 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x2d, 0x7, 0x0, {{0xc, 'cgroup.stat\x00'}}}, 0x19) 09:27:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) [ 224.930830] REISERFS warning (device loop4): reiserfs_fill_super: Cannot allocate commit workqueue 09:27:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000add8674faf86482f178d0f3b52ab8f7959bcd585b5ef640d752c2da51c0002158ae55c2c0defdbb2b410346cc889596c081ac55b271958b86f000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000e0000000000"], 0x24}}, 0x0) 09:27:26 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f00000002c0)='net/if_inet6\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 09:27:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0x3736dcd18eab2916, 0x0, 0x0, 0xffffffffffffff37) 09:27:26 executing program 0: 09:27:27 executing program 0: 09:27:27 executing program 2: 09:27:27 executing program 1: 09:27:27 executing program 2: 09:27:27 executing program 0: 09:27:27 executing program 5: 09:27:27 executing program 1: 09:27:27 executing program 3: 09:27:27 executing program 0: 09:27:27 executing program 2: 09:27:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0x3736dcd18eab2916, 0x0, 0x0, 0xffffffffffffff37) 09:27:27 executing program 0: 09:27:27 executing program 2: 09:27:27 executing program 1: 09:27:27 executing program 3: 09:27:27 executing program 5: 09:27:27 executing program 2: 09:27:27 executing program 0: 09:27:27 executing program 3: 09:27:27 executing program 1: 09:27:28 executing program 5: 09:27:28 executing program 2: 09:27:28 executing program 4: 09:27:28 executing program 0: 09:27:28 executing program 3: 09:27:28 executing program 1: 09:27:28 executing program 5: 09:27:28 executing program 2: 09:27:28 executing program 5: 09:27:28 executing program 3: 09:27:28 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002680)=[{&(0x7f0000002600)="cf052c0943da055de185d10d5e6e26373eb9cfc5e35ac37ce1c6e6b48ad394b59c494b993820b2904f0ef9370e1bde29ccc4ca531cc2ede92687d17e6bb348c6e82419c3638a7e5159d8f58be53cadb5923adab7e2", 0x55}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:27:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) read$rfkill(r3, 0x0, 0x1b3) 09:27:28 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088acb1bcbcee6e3666727ee4c1cbb1401d38e00c19143e29ee7a38c30006759992b44fe77ca24a43d7c56f341c478d58e7b853e84c3168eb6708cccf13129063fab5d3598e5e8a47e7254cf6bcd4c4e734a911cd61b2ed146d686b80af27c83c5ca1f4dd7a866ccd4b7440867f7089d24ac458ce575d72dd53736634977f5e42a6588ea93dc3d9a57f455f183e07da64eb20a59c9ad66f9ad9cee67352916c09417411d90c1e5a26c7f6f8719d9eb66cbbb471d25443aef2b597ae38fe5cac9cec0cab27ceb2557d928320660b847445d5d70141551d18c05584b0b1263ca23046978e5b38049ebc7c0d90a48e7bd5ad6a5e16a6f29e4720f4982245067c7fdd41d2b037f01a42829afe6ab3a0f55176481282017f723b22f4a1a3f896d0ef8a2bc5b7532fcf196997c80e9779acf603d9a288938dae18b67dc7f2cf2f3fcebce886451b6464aae6296a78f0c962738cfe3591dec5fc776db85a722901952440ca17b8d12b3037ca40acff22c9a1223b22b88329402bbee396883f8eb8cd3be5b2783ae411d16ff3f46e0b70b65e0c8cf6a60cd9b0a1da99eef48fb1810d9ac3dedc60a66b5304acd5ff3a7b4ba24b0405eeeeecae66d72049dd9357ef2556eea8d42f336adc4108200d838114ee4c6ba869150f6c0805971ed34508174c57a8ab95ea7c1783e1984e4614e2d2c9701fa7220819e827cec6cfa6d930f25c131419c4d296cff25bdea6cae713918707ec9c8b3e0cb2313bae6530fea171f5bc1baa4679207c2f4bd472af9568f1f14164ce7ac4b1964cbd3f1ccb259bb698c053d36ab7257ec20d73bdf4e245561fbac5ed36793118a80df227002f8525a6a30c39bff24ecd2432ddd0273f33f4c2d53189ba23d1f5596a2644896fff294f4ab4ef72afffdb9a7f86a8f5cc4bd63616139e166077158accd70cc12d1e9356b1f742c9ff9b383ae9b1bf2beb3c9645e4df6ce0a9d25958677215317fe9a313ee97b60acc59731b3422a48a6402c8790791b2f1928690edb9a47b86321af06330e2b4271252d345bd74dc7deb830fe1a142d951327552772ebb6734c967844ec2b193c"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 09:27:28 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='ro']) 09:27:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001c000f00000000dbf229885ee28f1293ca345248000000000000000000"], 0x14}}, 0x0) 09:27:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r0, r1, 0xf, 0x1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r2, r3, 0xf, 0x1}, 0x10) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 09:27:29 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 227.191703] gfs2: invalid mount option: ro [ 227.269289] audit: type=1400 audit(1569835649.077:40): avc: denied { prog_load } for pid=7889 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 09:27:29 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) r3 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) msgctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 227.272232] ptrace attach of "/root/syz-executor.1"[7653] was attempted by " 0 p   \x0c  @ = [ 227.383018] gfs2: can't parse mount arguments 09:27:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) keyctl$session_to_parent(0x12) 09:27:29 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 227.441994] gfs2: invalid mount option: ro [ 227.450205] audit: type=1400 audit(1569835649.257:41): avc: denied { prog_run } for pid=7889 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 227.472737] gfs2: can't parse mount arguments 09:27:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) 09:27:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 227.609783] audit: type=1804 audit(1569835649.367:42): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir334601864/syzkaller.O02XNz/10/file0" dev="sda1" ino=16564 res=1 09:27:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x6000, 0xc77, 0x2}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:27:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x8a000, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) r7 = dup(r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x800fe) getpid() getsockname$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) sendfile(r7, r8, 0x0, 0x8000fffffffe) sendmsg$nl_netfilter(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$inet6(0xa, 0x100800000000002, 0x88) [ 227.663508] ptrace attach of "/root/syz-executor.4"[7663] was attempted by "/root/syz-executor.4"[7924] 09:27:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000440)) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80000000002000) [ 227.747986] kvm: pic: non byte read [ 227.762198] kvm: pic: non byte write [ 227.767886] ptrace attach of "/root/syz-executor.4"[7663] was attempted by "/root/syz-executor.4"[7932] 09:27:29 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={[{@nodiscard='nodiscard'}]}) [ 227.783170] audit: type=1804 audit(1569835649.587:43): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir334601864/syzkaller.O02XNz/10/file0" dev="sda1" ino=16564 res=1 [ 227.826933] kvm: pic: single mode not supported [ 227.827138] kvm: pic: non byte read [ 227.857592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.860410] kvm: pic: non byte write 09:27:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x82, 0x200, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) 09:27:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 227.912841] audit: type=1804 audit(1569835649.587:44): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir334601864/syzkaller.O02XNz/10/file0" dev="sda1" ino=16564 res=1 [ 227.926786] kvm: pic: non byte read [ 227.968703] gfs2: not a GFS2 filesystem [ 228.003748] audit: type=1400 audit(1569835649.807:45): avc: denied { relabelto } for pid=7930 comm="syz-executor.5" name="bus" dev="sda1" ino=16561 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 228.028135] kvm: pic: non byte write [ 228.039338] ptrace attach of "/root/syz-executor.4"[7663] was attempted by " 0 p   \x0c  @ = [ 228.139463] audit: type=1400 audit(1569835649.937:46): avc: denied { read write } for pid=7930 comm="syz-executor.5" name="bus" dev="sda1" ino=16561 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 228.162380] kvm: pic: non byte read [ 228.188512] gfs2: not a GFS2 filesystem [ 228.193481] kvm: pic: non byte write [ 228.209794] kvm: pic: non byte read 09:27:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x9, 0x8000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 228.236616] kvm: pic: non byte write [ 228.237280] audit: type=1400 audit(1569835649.937:47): avc: denied { open } for pid=7930 comm="syz-executor.5" path="/root/syzkaller-testdir723980761/syzkaller.bgLNfE/9/bus" dev="sda1" ino=16561 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 228.252142] kvm: pic: non byte read [ 228.278190] audit: type=1400 audit(1569835649.987:48): avc: denied { map_create } for pid=7952 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 228.335837] kvm: pic: non byte write [ 228.348810] ptrace attach of "/root/syz-executor.4"[7663] was attempted by " 0 p   \x0c  @ = [ 228.353982] kvm: pic: non byte read [ 228.442041] kvm: pic: non byte write [ 228.446230] kvm: pic: non byte read [ 228.450163] kvm: pic: non byte write [ 228.454410] kvm: pic: non byte read [ 228.458307] kvm: pic: non byte write [ 228.462973] kvm: pic: non byte read [ 228.471455] kvm: pic: non byte write 09:27:30 executing program 1: 09:27:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x82, 0x200, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) 09:27:30 executing program 2: 09:27:30 executing program 4: 09:27:30 executing program 1: 09:27:30 executing program 0: 09:27:30 executing program 5: 09:27:30 executing program 3: 09:27:30 executing program 2: 09:27:30 executing program 4: 09:27:30 executing program 5: 09:27:30 executing program 0: 09:27:30 executing program 1: 09:27:30 executing program 2: 09:27:30 executing program 3: 09:27:30 executing program 5: 09:27:30 executing program 4: 09:27:30 executing program 0: 09:27:30 executing program 1: 09:27:30 executing program 2: 09:27:30 executing program 3: 09:27:30 executing program 4: 09:27:31 executing program 0: 09:27:31 executing program 5: 09:27:31 executing program 1: 09:27:31 executing program 3: 09:27:31 executing program 0: 09:27:31 executing program 4: 09:27:31 executing program 2: 09:27:31 executing program 1: 09:27:31 executing program 5: 09:27:31 executing program 3: 09:27:31 executing program 4: 09:27:31 executing program 0: 09:27:31 executing program 2: 09:27:31 executing program 1: 09:27:31 executing program 5: 09:27:31 executing program 3: 09:27:31 executing program 0: 09:27:31 executing program 4: 09:27:31 executing program 1: 09:27:31 executing program 5: 09:27:31 executing program 2: 09:27:31 executing program 3: 09:27:31 executing program 4: 09:27:31 executing program 0: 09:27:31 executing program 2: 09:27:31 executing program 5: 09:27:31 executing program 4: 09:27:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 09:27:31 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4660}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000280)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x701, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 09:27:31 executing program 0: 09:27:31 executing program 5: 09:27:31 executing program 4: 09:27:31 executing program 2: 09:27:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {0x0, 0x0, 0x0, 0x5, 0x64a}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:27:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) gettid() ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 09:27:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = eventfd2(0xef, 0x0) dup(r2) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 09:27:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:27:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@initdev, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) dup3(r0, r1, 0x0) [ 230.175580] *** Guest State *** [ 230.214435] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 230.257344] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 230.274910] CR3 = 0x0000000000000000 [ 230.278943] RSP = 0x000000000000005f RIP = 0x0000000000000076 [ 230.285278] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 230.285293] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 09:27:32 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) [ 230.307893] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 230.358483] DS: sel=0x0000, attr=0x00005, limit=0x00000000, base=0x0000000000000000 [ 230.390056] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 230.406068] ================================================================== [ 230.413674] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 230.421152] Write of size 24 at addr 0000000000000000 by task syz-executor.1/8099 [ 230.428874] [ 230.430525] CPU: 1 PID: 8099 Comm: syz-executor.1 Not tainted 4.19.75 #0 [ 230.437360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.437372] Call Trace: [ 230.437391] dump_stack+0x172/0x1f0 [ 230.437411] ? kvm_write_guest_virt_system+0x64/0x90 [ 230.437429] kasan_report.cold+0x199/0x2ba [ 230.437450] check_memory_region+0x123/0x190 [ 230.437466] memset+0x24/0x40 [ 230.437481] kvm_write_guest_virt_system+0x64/0x90 [ 230.437499] handle_vmread+0x7fe/0xa10 [ 230.437518] ? handle_invpcid+0xa80/0xa80 [ 230.437534] ? __lock_is_held+0xb6/0x140 [ 230.437556] ? __lock_is_held+0xb6/0x140 [ 230.437578] ? handle_invpcid+0xa80/0xa80 [ 230.437596] vmx_handle_exit+0x276/0x16b0 [ 230.437610] ? lock_acquire+0x16f/0x3f0 [ 230.437624] ? vcpu_enter_guest+0xf15/0x5ed0 [ 230.437651] vcpu_enter_guest+0x10ca/0x5ed0 [ 230.437675] ? emulator_read_emulated+0x50/0x50 [ 230.491450] ? lock_acquire+0x16f/0x3f0 [ 230.491467] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 230.491491] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 230.491505] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 230.491527] kvm_vcpu_ioctl+0x4dc/0xf90 [ 230.491542] ? kvm_vcpu_block+0xcc0/0xcc0 [ 230.491558] ? mark_held_locks+0x100/0x100 [ 230.491581] ? __might_fault+0x12b/0x1e0 [ 230.491595] ? __fget+0x340/0x540 09:27:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') sendfile(r1, r2, 0x0, 0x4000000001000009) [ 230.491612] ? find_held_lock+0x35/0x130 [ 230.513006] ? __fget+0x340/0x540 [ 230.513027] ? kvm_vcpu_block+0xcc0/0xcc0 [ 230.513045] do_vfs_ioctl+0xd5f/0x1380 [ 230.513062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.513075] ? selinux_file_ioctl+0x125/0x5e0 [ 230.513091] ? ioctl_preallocate+0x210/0x210 [ 230.541015] ? selinux_file_mprotect+0x620/0x620 [ 230.541040] ? iterate_fd+0x360/0x360 [ 230.541057] ? nsecs_to_jiffies+0x30/0x30 [ 230.541086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.541101] ? security_file_ioctl+0x8d/0xc0 [ 230.564487] ksys_ioctl+0xab/0xd0 [ 230.564503] __x64_sys_ioctl+0x73/0xb0 [ 230.564521] do_syscall_64+0xfd/0x620 [ 230.564541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.564552] RIP: 0033:0x459a29 [ 230.564565] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.564572] RSP: 002b:00007f44f82d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.564587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 230.564595] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 230.564603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 230.564612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f44f82d96d4 [ 230.564621] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 00000000ffffffff [ 230.564644] ================================================================== [ 230.564649] Disabling lock debugging due to kernel taint [ 230.568318] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 230.594557] kobject: 'rx-12' (00000000cc2b8b8e): kobject_add_internal: parent: 'queues', set: 'queues' [ 230.596790] kobject: 'loop2' (000000000701a78e): kobject_uevent_env [ 230.605911] kobject: 'rx-12' (00000000cc2b8b8e): kobject_uevent_env [ 230.613725] kobject: 'loop2' (000000000701a78e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 230.631937] kobject: 'rx-12' (00000000cc2b8b8e): fill_kobj_path: path = '/devices/virtual/net/bond1/queues/rx-12' [ 230.649320] kobject: 'loop4' (000000009691b6fe): kobject_uevent_env [ 230.703569] Kernel panic - not syncing: panic_on_warn set ... [ 230.703569] [ 230.771303] CPU: 0 PID: 8099 Comm: syz-executor.1 Tainted: G B 4.19.75 #0 [ 230.779547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.789406] Call Trace: [ 230.791990] dump_stack+0x172/0x1f0 [ 230.795627] ? kvm_write_guest_virt_system+0x64/0x90 [ 230.800804] panic+0x263/0x507 [ 230.804071] ? __warn_printk+0xf3/0xf3 [ 230.807959] ? kvm_write_guest_virt_system+0x64/0x90 [ 230.813052] ? preempt_schedule+0x4b/0x60 [ 230.817191] ? ___preempt_schedule+0x16/0x18 [ 230.821588] ? trace_hardirqs_on+0x5e/0x220 [ 230.825898] ? kvm_write_guest_virt_system+0x64/0x90 [ 230.830998] kasan_end_report+0x47/0x4f [ 230.834960] kasan_report.cold+0xa9/0x2ba [ 230.839271] check_memory_region+0x123/0x190 [ 230.843668] memset+0x24/0x40 [ 230.846765] kvm_write_guest_virt_system+0x64/0x90 [ 230.851693] handle_vmread+0x7fe/0xa10 [ 230.855570] ? handle_invpcid+0xa80/0xa80 [ 230.859708] ? __lock_is_held+0xb6/0x140 [ 230.863760] ? __lock_is_held+0xb6/0x140 [ 230.869050] ? handle_invpcid+0xa80/0xa80 [ 230.873203] vmx_handle_exit+0x276/0x16b0 [ 230.877351] ? lock_acquire+0x16f/0x3f0 [ 230.881399] ? vcpu_enter_guest+0xf15/0x5ed0 [ 230.885800] vcpu_enter_guest+0x10ca/0x5ed0 [ 230.890131] ? emulator_read_emulated+0x50/0x50 [ 230.894793] ? lock_acquire+0x16f/0x3f0 [ 230.898756] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 230.904196] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 230.909025] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 230.914034] kvm_vcpu_ioctl+0x4dc/0xf90 [ 230.918005] ? kvm_vcpu_block+0xcc0/0xcc0 [ 230.922142] ? mark_held_locks+0x100/0x100 [ 230.926368] ? __might_fault+0x12b/0x1e0 [ 230.930439] ? __fget+0x340/0x540 [ 230.933882] ? find_held_lock+0x35/0x130 [ 230.937942] ? __fget+0x340/0x540 [ 230.941383] ? kvm_vcpu_block+0xcc0/0xcc0 [ 230.945520] do_vfs_ioctl+0xd5f/0x1380 [ 230.949429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.954955] ? selinux_file_ioctl+0x125/0x5e0 [ 230.959440] ? ioctl_preallocate+0x210/0x210 [ 230.963836] ? selinux_file_mprotect+0x620/0x620 [ 230.968580] ? iterate_fd+0x360/0x360 [ 230.972368] ? nsecs_to_jiffies+0x30/0x30 [ 230.976523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.982046] ? security_file_ioctl+0x8d/0xc0 [ 230.986442] ksys_ioctl+0xab/0xd0 [ 230.989885] __x64_sys_ioctl+0x73/0xb0 [ 230.993772] do_syscall_64+0xfd/0x620 [ 230.997572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.002764] RIP: 0033:0x459a29 [ 231.005947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.024838] RSP: 002b:00007f44f82d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.032549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 231.039818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 231.047087] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 231.054346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f44f82d96d4 [ 231.062148] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 00000000ffffffff [ 231.070872] Kernel Offset: disabled [ 231.074509] Rebooting in 86400 seconds..