[info] Using makefile-style concurrent boot in runlevel 2. [ 45.087515][ T27] audit: type=1800 audit(1576287860.645:21): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 45.142049][ T27] audit: type=1800 audit(1576287860.645:22): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. 2019/12/14 01:44:31 fuzzer started 2019/12/14 01:44:33 dialing manager at 10.128.0.105:45083 2019/12/14 01:44:33 syscalls: 2686 2019/12/14 01:44:33 code coverage: enabled 2019/12/14 01:44:33 comparison tracing: enabled 2019/12/14 01:44:33 extra coverage: enabled 2019/12/14 01:44:33 setuid sandbox: enabled 2019/12/14 01:44:33 namespace sandbox: enabled 2019/12/14 01:44:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/14 01:44:33 fault injection: enabled 2019/12/14 01:44:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/14 01:44:33 net packet injection: enabled 2019/12/14 01:44:33 net device setup: enabled 2019/12/14 01:44:33 concurrency sanitizer: enabled 2019/12/14 01:44:33 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 63.949328][ T7806] KCSAN: could not find function: 'poll_schedule_timeout' 2019/12/14 01:44:42 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'wbt_issue' 'alloc_empty_file' 'run_timer_softirq' 'ext4_free_inode' 'futex_wait_queue_me' 'pid_update_inode' 'n_tty_receive_buf_common' 'blk_mq_sched_dispatch_requests' 'ktime_get_real_seconds' 'kauditd_thread' 'generic_permission' 'find_next_bit' 'blk_mq_dispatch_rq_list' 'tick_nohz_idle_stop_tick' 'rcu_gp_fqs_check_wake' 'ext4_nonda_switch' 'do_nanosleep' '__mark_inode_dirty' 'generic_write_end' 'tomoyo_supervisor' 'find_get_pages_range_tag' 'ext4_mark_iloc_dirty' 'page_counter_try_charge' 'do_signal_stop' 'clean_buffers' 'vm_area_dup' 'tick_sched_do_timer' 'timer_clear_idle' 'iomap_dio_bio_actor' 'xas_find_marked' 'lruvec_lru_size' 'ep_poll' '__ext4_new_inode' 'shmem_getattr' 'ext4_free_inodes_count' 'blk_mq_run_hw_queue' 'queue_access_lock' '__snd_rawmidi_transmit_ack' 'taskstats_exit' 'audit_log_start' 'poll_schedule_timeout' 'blk_mq_get_request' 'do_exit' 'exit_signals' 'add_timer' 'generic_fillattr' 'do_syslog' 'xas_clear_mark' 'blk_mq_free_request' 'echo_char' 'copy_process' 'pcpu_alloc' 'ext4_mb_good_group' 'mod_timer' 'ext4_has_free_clusters' 'wbt_done' 'do_try_to_free_pages' 'mm_update_next_owner' 'tick_do_update_jiffies64' 'sit_tunnel_xmit' 'commit_echoes' 01:46:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x9f}) 01:46:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) [ 185.128061][ T7809] IPVS: ftp: loaded support on port[0] = 21 [ 185.218316][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 185.274155][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.281262][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.303472][ T7809] device bridge_slave_0 entered promiscuous mode [ 185.310995][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.318626][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.326373][ T7809] device bridge_slave_1 entered promiscuous mode [ 185.337996][ T7812] IPVS: ftp: loaded support on port[0] = 21 [ 185.357645][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.384519][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:46:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x5b) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 185.425772][ T7809] team0: Port device team_slave_0 added [ 185.432525][ T7809] team0: Port device team_slave_1 added [ 185.478116][ T7812] chnl_net:caif_netlink_parms(): no params data found 01:46:41 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 185.615046][ T7809] device hsr_slave_0 entered promiscuous mode [ 185.663996][ T7809] device hsr_slave_1 entered promiscuous mode [ 185.751353][ T7809] netdevsim netdevsim0 netdevsim0: renamed from eth0 01:46:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x1, 0x70bd2c, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x80, @link='syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, [""]}, 0x68}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) setreuid(0x0, 0xee00) r2 = creat(0x0, 0x4007) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000380)) [ 185.815043][ T7809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.889504][ T7816] IPVS: ftp: loaded support on port[0] = 21 [ 185.913291][ T7809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.923383][ T7818] IPVS: ftp: loaded support on port[0] = 21 [ 185.950152][ T7809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.011556][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.018641][ T7809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.026057][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.033153][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.061348][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.069115][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.077053][ T7812] device bridge_slave_0 entered promiscuous mode [ 186.100020][ T7821] IPVS: ftp: loaded support on port[0] = 21 01:46:41 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 186.104081][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.113023][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.122408][ T7812] device bridge_slave_1 entered promiscuous mode [ 186.207070][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.241604][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.249582][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.271391][ T7823] IPVS: ftp: loaded support on port[0] = 21 [ 186.296577][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.314988][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.323466][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 186.360999][ T7812] team0: Port device team_slave_0 added [ 186.371784][ T7812] team0: Port device team_slave_1 added [ 186.397180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.405055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.415382][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.431115][ T7816] chnl_net:caif_netlink_parms(): no params data found [ 186.445432][ T7821] chnl_net:caif_netlink_parms(): no params data found [ 186.495758][ T7812] device hsr_slave_0 entered promiscuous mode [ 186.533162][ T7812] device hsr_slave_1 entered promiscuous mode [ 186.582962][ T7812] debugfs: Directory 'hsr0' with parent '/' already present! [ 186.590524][ T7818] chnl_net:caif_netlink_parms(): no params data found [ 186.649335][ T7812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.689189][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.697795][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.706392][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.713434][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.721132][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.730043][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.738566][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.745646][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.753514][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.762215][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.771404][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.780103][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.788710][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.797299][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.805910][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.814917][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.822722][ T7821] device bridge_slave_0 entered promiscuous mode [ 186.835941][ T7812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.889511][ T7812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.945217][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.953492][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.961942][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.973241][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.980347][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.988756][ T7821] device bridge_slave_1 entered promiscuous mode [ 187.017133][ T7812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.055254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.063978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.073992][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.090089][ T7821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.099416][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.108188][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.116087][ T7818] device bridge_slave_0 entered promiscuous mode [ 187.123377][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.130401][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.138201][ T7816] device bridge_slave_0 entered promiscuous mode [ 187.147978][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.155180][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.163261][ T7816] device bridge_slave_1 entered promiscuous mode [ 187.182434][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.193871][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.203965][ T7821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.217385][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.224940][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.232468][ T7818] device bridge_slave_1 entered promiscuous mode [ 187.280536][ T7821] team0: Port device team_slave_0 added [ 187.292485][ T7823] chnl_net:caif_netlink_parms(): no params data found [ 187.312821][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.323252][ T7821] team0: Port device team_slave_1 added [ 187.330910][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.338851][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.355963][ T7816] team0: Port device team_slave_0 added [ 187.366998][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.387574][ T7818] team0: Port device team_slave_0 added [ 187.394264][ T7816] team0: Port device team_slave_1 added [ 187.407436][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.414711][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.422230][ T7823] device bridge_slave_0 entered promiscuous mode [ 187.436182][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.444199][ T7818] team0: Port device team_slave_1 added [ 187.456620][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.464122][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.471741][ T7823] device bridge_slave_1 entered promiscuous mode [ 187.514608][ T7821] device hsr_slave_0 entered promiscuous mode [ 187.573196][ T7821] device hsr_slave_1 entered promiscuous mode [ 187.633039][ T7821] debugfs: Directory 'hsr0' with parent '/' already present! [ 187.687099][ T7816] device hsr_slave_0 entered promiscuous mode [ 187.743274][ T7816] device hsr_slave_1 entered promiscuous mode [ 187.802963][ T7816] debugfs: Directory 'hsr0' with parent '/' already present! [ 187.857636][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.876208][ T7832] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.895233][ T7818] device hsr_slave_0 entered promiscuous mode 01:46:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x2000000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 187.933187][ T7818] device hsr_slave_1 entered promiscuous mode 01:46:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x2000000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 187.992922][ T7818] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.006646][ T7823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.029322][ T7821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.076794][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.092184][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:46:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x2000000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 188.118516][ T7823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.137948][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.146493][ T7821] netdevsim netdevsim4 netdevsim1: renamed from eth1 01:46:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x2000000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) [ 188.175111][ T7816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.214665][ T7816] netdevsim netdevsim2 netdevsim1: renamed from eth1 01:46:43 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f21e40f09827d0f3a0f01c2260f01df6767642667660f3a41024166baa100b000ee0f9439660f38808f000000800f7801", 0x31}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 188.244973][ T7816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.304077][ T7821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.344830][ T7821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.395674][ T7816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.405709][ C0] hrtimer: interrupt took 24304 ns [ 188.473435][ T7823] team0: Port device team_slave_0 added [ 188.481926][ T7823] team0: Port device team_slave_1 added [ 188.489217][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.498684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.507299][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.514358][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.522650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.534328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.542545][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.549652][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.561323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.570108][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.579138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.588084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.597230][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.605118][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 01:46:44 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f21e40f09827d0f3a0f01c2260f01df6767642667660f3a41024166baa100b000ee0f9439660f38808f000000800f7801", 0x31}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 188.675501][ T7823] device hsr_slave_0 entered promiscuous mode [ 188.723547][ T7823] device hsr_slave_1 entered promiscuous mode [ 188.762924][ T7823] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.775852][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.784629][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.793508][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.801861][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.810247][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 01:46:44 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f21e40f09827d0f3a0f01c2260f01df6767642667660f3a41024166baa100b000ee0f9439660f38808f000000800f7801", 0x31}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 188.818752][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.832419][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.855829][ T7818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.895002][ T7818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.992458][ T7818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.055122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.062610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.072480][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.080240][ T7823] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.125121][ T7823] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.156127][ T7818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.228603][ T7823] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.274921][ T7823] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.332579][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.349278][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.388628][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.396771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.412170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.439053][ T7821] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.450723][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.474010][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.481642][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.490580][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.499007][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.506115][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.520163][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 01:46:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) [ 189.543808][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.555432][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.565621][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.576051][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.583129][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.592253][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.604323][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.616830][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.623870][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.631839][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.640466][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.648738][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.655763][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.682519][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.694647][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.701944][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.714269][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.726161][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.735195][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.747406][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.756179][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.767999][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.776735][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.785252][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.793581][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.801923][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.810245][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.819234][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.827084][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.834716][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.844008][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.853566][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.861621][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.870471][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.878876][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.885905][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.900639][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.910977][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.919019][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.929645][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.939704][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.949823][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.958219][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.973062][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.981628][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.990196][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.997667][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.005236][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.014017][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.022283][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.029319][ T7828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.045667][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.055214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.064169][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.072519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.079554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.087515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.095960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.104474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.113070][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.121407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.128435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.136578][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.144816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.153060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.162261][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.182408][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.190672][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.216174][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.226413][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.235576][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.244168][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.252994][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.261422][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.270590][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.279284][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.288043][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.296651][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.305628][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.314043][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.322426][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.331055][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.339863][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.348008][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.360601][ T7821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.371738][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.381573][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.399541][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.422774][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.431896][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.446735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.457453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.468427][ T7823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.483492][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.490915][ T2572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.508700][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.522227][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.533765][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.541247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.656504][ T7898] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 190.761765][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 190.761861][ T27] audit: type=1804 audit(1576288006.315:31): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir844695335/syzkaller.75hgwE/0/file0" dev="sda1" ino=16527 res=1 [ 191.098795][ T27] audit: type=1804 audit(1576288006.655:32): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir844695335/syzkaller.75hgwE/0/file0" dev="sda1" ino=16527 res=1 01:46:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x5b) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 01:46:46 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f21e40f09827d0f3a0f01c2260f01df6767642667660f3a41024166baa100b000ee0f9439660f38808f000000800f7801", 0x31}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:46:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) 01:46:46 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:46 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 191.305949][ T27] audit: type=1804 audit(1576288006.865:33): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir844695335/syzkaller.75hgwE/1/file0" dev="sda1" ino=16539 res=1 01:46:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) 01:46:47 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:47 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:46:47 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 191.915898][ T27] audit: type=1804 audit(1576288007.475:34): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir618634081/syzkaller.Fbi1io/9/file0" dev="sda1" ino=16515 res=1 [ 192.009686][ T27] audit: type=1804 audit(1576288007.565:35): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir336169566/syzkaller.wOwVBG/4/file0" dev="sda1" ino=16530 res=1 01:46:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x5b) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 01:46:47 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:47 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:46:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 192.343854][ T27] audit: type=1804 audit(1576288007.905:36): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir844695335/syzkaller.75hgwE/2/file0" dev="sda1" ino=16544 res=1 01:46:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 01:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) 01:46:48 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:46:48 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 192.754968][ T27] audit: type=1804 audit(1576288008.315:37): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir618634081/syzkaller.Fbi1io/10/file0" dev="sda1" ino=16531 res=1 01:46:48 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x129041, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)='4', 0x1) sendfile(r0, r1, 0x0, 0x666d) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) sendfile(r0, r1, 0x0, 0xa195) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 01:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r2, &(0x7f00000021c0), 0xfffffcfe) [ 192.978191][ T27] audit: type=1804 audit(1576288008.385:38): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir336169566/syzkaller.wOwVBG/5/file0" dev="sda1" ino=16534 res=1 [ 193.062769][ T27] audit: type=1804 audit(1576288008.525:39): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir844695335/syzkaller.75hgwE/3/file0" dev="sda1" ino=16540 res=1 01:46:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mkdir(&(0x7f0000000080)='./bus/file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') [ 193.183154][ T7975] ================================================================== [ 193.191284][ T7975] BUG: KCSAN: data-race in enqueue_timer / wbt_wait [ 193.197863][ T7975] [ 193.200194][ T7975] write to 0xffff88812a09d718 of 8 bytes by task 10 on cpu 0: [ 193.207649][ T7975] enqueue_timer+0x6c/0x210 [ 193.212151][ T7975] __internal_add_timer+0x4f/0x60 [ 193.217157][ T7975] schedule_timeout+0x2a0/0x6e0 [ 193.221995][ T7975] rcu_gp_fqs_loop+0x37c/0x580 [ 193.226757][ T7975] rcu_gp_kthread+0x143/0x230 [ 193.231421][ T7975] kthread+0x1d4/0x200 [ 193.235480][ T7975] ret_from_fork+0x1f/0x30 [ 193.239887][ T7975] [ 193.242252][ T7975] read to 0xffff88812a09d718 of 8 bytes by task 7975 on cpu 1: [ 193.249818][ T7975] wbt_wait+0x177/0x250 [ 193.253967][ T7975] __rq_qos_throttle+0x47/0x70 [ 193.258709][ T7975] blk_mq_make_request+0x29c/0xf60 [ 193.263803][ T7975] generic_make_request+0x196/0x700 [ 193.268978][ T7975] submit_bio+0x96/0x3c0 [ 193.273201][ T7975] submit_bh_wbc+0x40f/0x460 [ 193.277771][ T7975] __sync_dirty_buffer+0xd3/0x210 [ 193.282791][ T7975] sync_dirty_buffer+0x24/0x40 [ 193.287541][ T7975] ext4_write_inode+0x312/0x330 [ 193.292373][ T7975] __writeback_single_inode+0x6f7/0x8e0 [ 193.297943][ T7975] writeback_single_inode+0x232/0x310 [ 193.303308][ T7975] sync_inode_metadata+0x74/0xa0 [ 193.308226][ T7975] ext4_sync_file+0x4b5/0xaf0 [ 193.312902][ T7975] vfs_fsync_range+0x82/0x150 [ 193.317560][ T7975] ext4_buffered_write_iter+0x222/0x290 [ 193.323095][ T7975] ext4_file_write_iter+0xf4/0xd40 [ 193.328187][ T7975] do_iter_readv_writev+0x487/0x5b0 [ 193.333390][ T7975] do_iter_write+0x13b/0x3c0 [ 193.337958][ T7975] vfs_iter_write+0x5c/0x80 [ 193.342445][ T7975] iter_file_splice_write+0x530/0x840 [ 193.347812][ T7975] direct_splice_actor+0xa0/0xc0 [ 193.352750][ T7975] splice_direct_to_actor+0x22b/0x540 [ 193.358117][ T7975] do_splice_direct+0x161/0x1e0 [ 193.362957][ T7975] do_sendfile+0x384/0x7f0 [ 193.367351][ T7975] __x64_sys_sendfile64+0x12a/0x140 [ 193.372531][ T7975] do_syscall_64+0xcc/0x3a0 [ 193.377016][ T7975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.382881][ T7975] [ 193.385185][ T7975] Reported by Kernel Concurrency Sanitizer on: [ 193.391318][ T7975] CPU: 1 PID: 7975 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 193.399880][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.409910][ T7975] ================================================================== [ 193.417948][ T7975] Kernel panic - not syncing: panic_on_warn set ... [ 193.424518][ T7975] CPU: 1 PID: 7975 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 193.433074][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.443103][ T7975] Call Trace: [ 193.446376][ T7975] dump_stack+0x11d/0x181 [ 193.450686][ T7975] panic+0x210/0x640 [ 193.454565][ T7975] ? vprintk_func+0x8d/0x140 [ 193.459152][ T7975] kcsan_report.cold+0xc/0xd [ 193.463740][ T7975] kcsan_setup_watchpoint+0x3fe/0x460 [ 193.469100][ T7975] __tsan_read8+0xc6/0x100 [ 193.473496][ T7975] wbt_wait+0x177/0x250 [ 193.477640][ T7975] ? wbt_cleanup+0x80/0x80 [ 193.482095][ T7975] __rq_qos_throttle+0x47/0x70 [ 193.486863][ T7975] blk_mq_make_request+0x29c/0xf60 [ 193.491958][ T7975] ? blk_queue_enter+0x532/0x570 [ 193.496887][ T7975] generic_make_request+0x196/0x700 [ 193.502066][ T7975] ? __rcu_read_unlock+0x66/0x3d0 [ 193.507087][ T7975] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 193.513029][ T7975] submit_bio+0x96/0x3c0 [ 193.517259][ T7975] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 193.523005][ T7975] ? guard_bio_eod+0x131/0x3b0 [ 193.527782][ T7975] ? bio_add_page+0xf8/0x130 [ 193.532361][ T7975] submit_bh_wbc+0x40f/0x460 [ 193.536937][ T7975] __sync_dirty_buffer+0xd3/0x210 [ 193.541945][ T7975] sync_dirty_buffer+0x24/0x40 [ 193.546700][ T7975] ext4_write_inode+0x312/0x330 [ 193.551564][ T7975] __writeback_single_inode+0x6f7/0x8e0 [ 193.557125][ T7975] writeback_single_inode+0x232/0x310 [ 193.562503][ T7975] sync_inode_metadata+0x74/0xa0 [ 193.567438][ T7975] ext4_sync_file+0x4b5/0xaf0 [ 193.572124][ T7975] ? __read_once_size.constprop.0+0x20/0x20 [ 193.578005][ T7975] vfs_fsync_range+0x82/0x150 [ 193.582663][ T7975] ext4_buffered_write_iter+0x222/0x290 [ 193.588193][ T7975] ext4_file_write_iter+0xf4/0xd40 [ 193.593287][ T7975] ? common_file_perm+0x1d5/0x490 [ 193.598295][ T7975] do_iter_readv_writev+0x487/0x5b0 [ 193.603474][ T7975] ? security_file_permission+0x88/0x280 [ 193.609108][ T7975] do_iter_write+0x13b/0x3c0 [ 193.613692][ T7975] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 193.619591][ T7975] vfs_iter_write+0x5c/0x80 [ 193.624105][ T7975] iter_file_splice_write+0x530/0x840 [ 193.629501][ T7975] ? page_cache_pipe_buf_release+0x100/0x100 [ 193.635474][ T7975] direct_splice_actor+0xa0/0xc0 [ 193.640407][ T7975] splice_direct_to_actor+0x22b/0x540 [ 193.645872][ T7975] ? generic_pipe_buf_nosteal+0x20/0x20 [ 193.651421][ T7975] do_splice_direct+0x161/0x1e0 [ 193.656284][ T7975] do_sendfile+0x384/0x7f0 [ 193.660714][ T7975] __x64_sys_sendfile64+0x12a/0x140 [ 193.665916][ T7975] do_syscall_64+0xcc/0x3a0 [ 193.670425][ T7975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.676322][ T7975] RIP: 0033:0x45a909 [ 193.680218][ T7975] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.699820][ T7975] RSP: 002b:00007f6b07cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 193.708237][ T7975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a909 [ 193.716215][ T7975] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 193.724185][ T7975] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 193.732155][ T7975] R10: 000000000000a195 R11: 0000000000000246 R12: 00007f6b07cc36d4 [ 193.740127][ T7975] R13: 00000000004c9270 R14: 00000000004e0e50 R15: 00000000ffffffff [ 193.749691][ T7975] Kernel Offset: disabled [ 193.754015][ T7975] Rebooting in 86400 seconds..