[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. Warning: Permanently added '10.128.1.49' (ECDSA) to the list of known hosts. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/10/07 06:05:22 fuzzer started 2020/10/07 06:05:23 dialing manager at 10.128.0.26:35941 2020/10/07 06:05:24 syscalls: 3414 2020/10/07 06:05:24 code coverage: enabled 2020/10/07 06:05:24 comparison tracing: enabled 2020/10/07 06:05:24 extra coverage: enabled 2020/10/07 06:05:24 setuid sandbox: enabled 2020/10/07 06:05:24 namespace sandbox: enabled 2020/10/07 06:05:24 Android sandbox: enabled 2020/10/07 06:05:24 fault injection: enabled 2020/10/07 06:05:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/07 06:05:24 net packet injection: enabled 2020/10/07 06:05:24 net device setup: enabled 2020/10/07 06:05:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/07 06:05:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/07 06:05:24 USB emulation: enabled 2020/10/07 06:05:24 hci packet injection: enabled 2020/10/07 06:05:24 wifi device emulation: enabled 06:08:40 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000003a00)) syzkaller login: [ 366.135908][ T28] audit: type=1400 audit(1602050921.164:8): avc: denied { execmem } for pid=8520 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 367.645181][ T8521] IPVS: ftp: loaded support on port[0] = 21 [ 368.180925][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 368.398519][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.405944][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.415571][ T8521] device bridge_slave_0 entered promiscuous mode [ 368.474708][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.481830][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.491600][ T8521] device bridge_slave_1 entered promiscuous mode [ 368.547786][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.566086][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.624751][ T8521] team0: Port device team_slave_0 added [ 368.639912][ T8521] team0: Port device team_slave_1 added [ 368.691958][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.700047][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.726606][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.743813][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.750868][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.777915][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.850246][ T8521] device hsr_slave_0 entered promiscuous mode [ 368.862610][ T8521] device hsr_slave_1 entered promiscuous mode [ 369.352128][ T8521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.371319][ T8521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.393351][ T8521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.411559][ T8521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.583789][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 369.708575][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.741324][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.751205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.773304][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.798451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.809627][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.819410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.826772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.876668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.886044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.896379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.905772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.913091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.922082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.933909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.955369][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.957376][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.002133][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.012002][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.022694][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.032890][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.042388][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.076543][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.092549][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.135489][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.145211][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.176087][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.183879][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.220572][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.287154][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.297361][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.363371][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.373162][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.402201][ T8521] device veth0_vlan entered promiscuous mode [ 370.412290][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.421469][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.461924][ T8521] device veth1_vlan entered promiscuous mode [ 370.541041][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.550964][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.560466][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.570439][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.603803][ T8521] device veth0_macvtap entered promiscuous mode [ 370.627204][ T8521] device veth1_macvtap entered promiscuous mode [ 370.689950][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.697781][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.707465][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.717299][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.727482][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.765531][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.784426][ T8521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.793356][ T8521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.802169][ T8521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.811212][ T8521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.828667][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.838819][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.141943][ T331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.150756][ T331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.158523][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.249812][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.257888][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.267928][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:08:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x0, 0x0, 0x7bb, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001200)='nl80211\x00') [ 371.664226][ T3240] Bluetooth: hci0: command 0x041b tx timeout 06:08:47 executing program 0: getrandom(&(0x7f0000000d80)=""/122, 0x7a, 0x0) 06:08:47 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x6]}, 0x8}) 06:08:47 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80)='nl80211\x00') 06:08:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 06:08:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0xc8, 0x0, 0xc8, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}, {{@ipv6={@ipv4, @loopback, [], [], 'bond_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x2}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2c4) 06:08:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x109000, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000049c0)={0x2020}, 0x2020) sendfile(r1, r0, &(0x7f0000000000), 0x3f) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000007c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendfile(r5, r4, 0x0, 0x10000edbe) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') mq_timedreceive(r4, &(0x7f0000000280), 0x0, 0x6, &(0x7f00000002c0)={0x0, 0x989680}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000091) 06:08:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000000)=0x80000000) [ 373.744885][ T3240] Bluetooth: hci0: command 0x040f tx timeout 06:08:49 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000100)="10c4645f010000000100000001000000040000000b0000000020", 0xfffffdba, 0xb200}], 0x0, &(0x7f0000000040)={[], [{@obj_user={'obj_user', 0x3d, '\'!'}}]}) [ 374.738485][ T8807] jfs: Unrecognized mount option "obj_user='!" or missing value 06:08:50 executing program 0: syz_read_part_table(0x3, 0x2, &(0x7f0000001940)=[{0x0, 0x0, 0x4c53}, {&(0x7f0000000880)="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", 0x1e1, 0x1}]) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) [ 375.327245][ T8815] loop0: AHDI p2 p3 [ 375.331913][ T8815] loop0: p2 start 3449936669 is beyond EOD, truncated [ 375.571388][ T8815] loop0: AHDI p2 p3 [ 375.576062][ T8815] loop0: p2 start 3449936669 is beyond EOD, truncated 06:08:50 executing program 0: syz_emit_ethernet(0x300506, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000086dd60b4090000000040fe80000004a800fbffe0000002ff0200002200000ad0b23c00000f20018830907800c2040030"], 0x0) [ 375.825347][ T3240] Bluetooth: hci0: command 0x0419 tx timeout 06:08:52 executing program 1: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40c200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000100)) r2 = openat$vsock(0xffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) sendto$l2tp6(r1, &(0x7f0000000180)="9a3eafaa6f94b1961d9cee466b01373b95e85f4ef691b9059cae9783b071e0a664ab1f66389ad698d9afd808283d8a5fdecf3555e602a874b42c9aa78f5a31fa1148a50182c7a2121a018f54ad8b20878a3497a35611efb3b4dfdc33b442bf3b470a226a347566e3a13f11f243cde45e9ac2d46565914b1f05ccc5047945f3bfce3e", 0x82, 0x8004, &(0x7f0000000240)={0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x25}, 0x1, 0x3}, 0x20) r3 = dup2(r1, r0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x800) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000002c0)={0x1, 0xffffffff, 0x80}) r5 = openat$dlm_plock(0xffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) syz_usbip_server_init(0x5) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000340)={0x1, 0x10, 0x0, 0xffffffffffffffff}) close(r6) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000380)=""/69) r7 = openat$cgroup_subtree(r1, &(0x7f0000001500)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001540)=0x0) sendmsg$netlink(r5, &(0x7f0000003dc0)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)=[{&(0x7f0000000440)={0x109c, 0x1d, 0x8, 0x70bd2a, 0x25dfdbff, "", [@generic="145805fd3d7ccbc1312968af36689dfb7a37802bfb31148254007ac002c47aee27d4773ee858543cdb7cc8838deaaa1a3f7d60158b94fb8644792f607761f806e27f8bc16496c1a9047072b15a849e", @generic="eaf42ac22beb3d", @nested={0x1033, 0x47, 0x0, 0x1, [@typed={0x1004, 0x5b, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}, @generic="d1b34b5fd4fb5a42275eac8d50eb2d6a1fa0230eb7d41aa720a2e2", @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}]}, 0x109c}, {&(0x7f0000001580)={0x688, 0x22, 0x1, 0x70bd26, 0x25dfdbff, "", [@generic="c23c9cab8cc396481afe2eda371878798d6703d09c25077a1aa4b8c6344b4d241f6f857d1cfea5b04b36f91e32b107c8a8dc55a204f90359879ab52d4a5df8a4477e624d0f74d588f2d5db340d8d6b5704912735e8be80b71f7ce826187f9a77a6ef9c39b4950f1a2985e79d7315605d5629d9fd0a27f1", @generic="64f05aee194879e4910cb44393a93a196c5b3e0ffae5680ce510e6f307ed3b44b0541a458c7b62865c2789bc8dcd7c418dd7a0fd18ebcf4d62688b247b1d32e45986226d51f784292300f767e2d11d2625668cb42645f6a5a6a5a31862c78b30e10cba7393e745826f985b415c2ac48f035b1669849f496e1ad0702f42c4fca29d112b7ac21bbe93eef2b6aeb43a997527180c7cc76122f493e1d44e9fe0c3ad9c9f342bc3a39cf08ebe1f2bab9ad9a27a8ae9fd9a11d4f56a9d769d92fb4bda2dd6", @nested={0x2d6, 0x25, 0x0, 0x1, [@generic="558bd59d79091c3194d47a083d471ad5970a6a549a3707c7b66148c8f9edd840009bef2d19b85e955ac7db260cb58552e391f54b4602509673255c45313a05665ebca9d0fabe15f4146ae40e2e3a50a5e9b1d635fbb8c3d3dec192ed62b817d6300cfa7f1ecad5ea5ba0bce36e4e2ee5dd811c3dbdbb0101ce4e54d3ac531b8e6d73d9a408b7c7b123ede3bcccc09eb84503a7f1eaec53bbfdc0e53583c5ab9f8fa74e9f667c48390eb7e93c89", @typed={0x8, 0x17, 0x0, 0x0, @uid=0xee00}, @generic="671e68e94df8d612e627c61245779c678431ab67fb7c6f42c2da6c5360ec8825ef8954b5d69a02040793a9986906f551797a4646ec55d891433930504df6be4dd367f6b1ea27b3975cd25ecff5a6f0cc58cd3f603e9f86611904714283cc13c46ecb87fe6dd073087df8c6cf3a7b3ed8ce1ad8e3dacb", @generic="4b02c3a7520eab2dec162955498bc1a01c8c0707c89f059356617959e3b62d25811ebf63a153bd54fa13aa516d1ad894bf572579199671c487945552f38877b3cd7af5329e1b112bdacc587bc4538cdef25dcdc7be5030ac422fa1265075fab825a041b7ebd05560a00da7d83d7100f050e4c1942be2decf953540a6ca561dbc31b5407a6d4df637158369b4d46a878145c5a6cc7c3dd1a08b1f5f512fc9f3380c8d52c76cbc920c2bd64e805e44fa72a4e626c7f3d3cea75f21b0f7", @generic="940beebf02eda63ec0944bb7762e19d533e04a5bcb0f117de1c159ad609e614c0d84eb6a4bbc0713c0ebae14aedd7f490fb5a3a66e4770b0b5fc89a72a186b4dabf782b0cdd58c12ce38b74e806dc708dbea22beca28537cab2ebbffab08c238162bf1298011e4d09967d06ab7a1fe8cc430ec72599ba81a73b642dca33e465bd82fae843f32782bcc8b63ba610779db5b45c3c53b35efb2845037128ab5c9baea9b9c2dc886d4454517273dcf61a11be369fbd63d6fafa3332133fb0a90544831fd4b63e05f01", @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @typed={0xf, 0x2, 0x0, 0x0, @str='/dev/vsock\x00'}]}, @nested={0x24b, 0x68, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @u32=0x8000}, @typed={0xa9, 0x4b, 0x0, 0x0, @binary="3388432129d8585a9e23a404cccb0514b73f75a21786799b49aba7a536b04874d39630e1e8248c446c53aa911d2041237b090492f66c5f390ab25f412d1c72e05490ecb6c326068c157fa4a359ff0a410b3a6fb4887526e4a2e0a5275ea01f0b74fae7cf71dd3d9dd9c80f0a3d02179036726f3f6c6016e5fbb4b0ad1747c3539fffe9007d0a4646a46e3d861e0835275d086a184ae01d9e9b7a8c5c157669d677a2a3f667"}, @generic="21868ec69d01295f77902c049e46cc84682569e8078822c57d76d1c654cec5a40c376cac09753381921848992991dee41b6893ceeb52c2e628ffb4f131232f952ca20c86a7d97d6a6a0d0920189e74e8494345fa346edb86b26f220ca212a0ef288fb6699b5b7303b06e1f0f6ede08d7786e544c4bda5d0cf1dfe92604bba9fcd6", @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x1d, 0x0, 0x0, @fd=r7}, @generic="d2bd2e32ea8b67067fc60657e73d4f404388abada3f6df46a3d7849e294cee77ec898612cd34dce1b6af1d16136fa2dec81864f3bbd64fcdbe8c90d97efdf3efab4d26e320491cd3926bc78b4b599a25941e4e8d95c8a022b5db3825cf6c1147221f1353f7897482fa20aaa0bae1236fc3af804118b60d61f7f5a19d51b78927ab8613c7f1cd3b6fb682cacdea60a46999e4227e6987808b6cfc44f9085961fff7cdbef0f0a2b0bada19b13c424b997f799e8c77f780d2bbe6b33c5c7cf52c4ee321ccb1a7ea4f713a1fbde495d7351dde686749406a440c9035ceddb37397d50ea4f16325088063115d150afec8268c1812baa2acd8"]}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x5d}]}, 0x688}], 0x2, &(0x7f0000003d80)=[@cred={{0x18}}], 0x18, 0x200080c0}, 0x8001) 06:08:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/41, 0x29}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ocfs2_control\x00', 0x422040, 0x0) epoll_wait(r2, 0x0, 0x0, 0x17bb) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x400}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x0, 0xc0000) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000140)={@initdev, @rand_addr, @empty}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r4 = socket$inet(0x2, 0x3, 0x19) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020027bd7000fcdbdfe9010000000800090002000000080002000100000008000800020000000c000300ed00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setreuid(0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x8, 0x1000, &(0x7f0000001300)=""/4096) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {}, {0x40}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x1}}, 0xe4) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0, 0x0) [ 378.870225][ C0] hrtimer: interrupt took 77336 ns [ 378.893328][ T8833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8833 comm=syz-executor.0 [ 379.666468][ T8831] IPVS: ftp: loaded support on port[0] = 21 [ 379.973565][ T8863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8863 comm=syz-executor.0 06:08:55 executing program 0: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f00000000c0)="c27be4b577af5c462c6e039395d4f8571e0741700b91eaa8973ff2ea64454caed00b66a9f87105414a7dd550c875b11e69a4f4622c143e8746f6a1b2f76a3807b87ffd89523655410049d8ea1cdd468a68919d518e103052e887e8f0afcdabe37f72ba0053e3c236138d8aeecf781ce3d1d89c930edb11e40ab4dbe30b5d775c5eec823494c8f3341435f62713ef875aa91ba09ce9350e334833a3cac233d6445fe0cc9ee6eb6d598202770badb731704701603216e00da3243ea47c57", 0xbd, 0x2, 0x0, 0x2}, &(0x7f00000001c0)) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86df020000000000000000000000000001820090780000004000000000000000000000ffffac14140000020000"], 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x1) [ 380.482224][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 380.699280][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.706730][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.716400][ T8831] device bridge_slave_0 entered promiscuous mode [ 380.736709][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.744703][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.754282][ T8831] device bridge_slave_1 entered promiscuous mode [ 380.810454][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.827767][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:08:55 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@lastblock={'lastblock', 0x3d, 0x1}}, {@uid_forget='uid=forget'}, {@unhide='unhide'}]}) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10000040) [ 380.882749][ T8831] team0: Port device team_slave_0 added [ 380.897606][ T8831] team0: Port device team_slave_1 added [ 380.964459][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.971534][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.998609][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.071852][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.079345][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.106244][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.196813][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.204427][ T9003] UDF-fs: Scanning with blocksize 512 failed [ 381.230978][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.238544][ T9003] UDF-fs: Scanning with blocksize 1024 failed [ 381.250485][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.258222][ T9003] UDF-fs: Scanning with blocksize 2048 failed [ 381.272268][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.279967][ T9003] UDF-fs: Scanning with blocksize 4096 failed [ 381.297304][ T8831] device hsr_slave_0 entered promiscuous mode [ 381.325047][ T8831] device hsr_slave_1 entered promiscuous mode [ 381.344436][ T8831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.352055][ T8831] Cannot create hsr debugfs directory [ 381.353668][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.365211][ T9003] UDF-fs: Scanning with blocksize 512 failed [ 381.381832][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.389863][ T9003] UDF-fs: Scanning with blocksize 1024 failed [ 381.405884][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.413390][ T9003] UDF-fs: Scanning with blocksize 2048 failed [ 381.426032][ T9003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 381.433545][ T9003] UDF-fs: Scanning with blocksize 4096 failed 06:08:56 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40045108, &(0x7f0000000000)={{0x0, 0x64}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, {0xa, 0x2, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0xe1, 0xfff, 0x1b8f, 0x200}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000002600)=""/4104, 0x1008}], 0x1, 0x0, 0x0, 0x7115}, 0x100) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x888008}}, 0x50) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x200}}, 0x18) [ 381.586404][ T3240] Bluetooth: hci1: command 0x0409 tx timeout [ 382.199537][ T8831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.238744][ T8831] netdevsim netdevsim1 netdevsim1: renamed from eth1 06:08:57 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40045108, &(0x7f0000000000)={{0x0, 0x64}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, {0xa, 0x2, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0xe1, 0xfff, 0x1b8f, 0x200}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ad, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000002600)=""/4104, 0x1008}], 0x1, 0x0, 0x0, 0x7115}, 0x100) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x888008}}, 0x50) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x200}}, 0x18) [ 382.276631][ T8831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.315588][ T8831] netdevsim netdevsim1 netdevsim3: renamed from eth3 06:08:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000001c0)={0x89, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7, 0x7, 0x6, 0x1}, {0x7, 0x6, 0x1, 0x7fffffff}, {0x6, 0x1f, 0x93, 0x200}, {0xfffa, 0x81, 0x20, 0x5}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3, 0x200000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) process_vm_writev(0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x39, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x200011c0}], 0x54, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000007c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendfile(r5, r4, 0x0, 0x10000edbe) kcmp(r2, 0x0, 0x2, r4, r3) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000200)={&(0x7f0000000f40)=""/4096, 0x1000}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000140)=0x1) [ 382.994427][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.065439][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.074532][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.102424][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.146808][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.156700][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.165992][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.173220][ T8721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.208507][ T9077] input: syz0 as /devices/virtual/input/input5 [ 383.267706][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.277023][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.286861][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.296868][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.304094][ T8721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.313110][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.323865][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.358071][ T9083] input: syz0 as /devices/virtual/input/input6 [ 383.387342][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.398103][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 06:08:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000038d4b98ba000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) [ 383.474672][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.485155][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.495455][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.568329][ T8831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.579237][ T8831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.621558][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.631384][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.642625][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.652180][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.666025][ T8721] Bluetooth: hci1: command 0x041b tx timeout [ 383.766134][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.790212][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.798818][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:08:58 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x9000}, {&(0x7f0000010300)="010003001f000100ad1cf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0x60000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1d602c34002a4c696e757820554446465300000000000000000000000405", 0xde, 0x600c0}, {&(0x7f0000010500)="000000000000000001", 0x9, 0x601e0}, {&(0x7f0000010600)="06000300520001006797e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x5d, 0x61000}, {&(0x7f0000010700)="000000000000000000000000000000000000000900100000002a4f5354412055444620436f6d706c69616e74000000000102000000000000001000001000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0x610c0}, {&(0x7f0000010800)="00000000000000000000000000000000000001008000000002400000002a554446205370617261626c6520506172746974696f6e010204050000000001000000100002003802000070000000f007", 0x4e, 0x611a0}, {&(0x7f0000010900)="05000300290001004687f001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000010", 0x42, 0x62000}, {&(0x7f0000010a00)="0000000000000000000000000000000000000000000000000400000010050000d0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0x620a0}, {&(0x7f0000011200)="090003007500010091e17600800000000010e4070913122c1e3d2d0e0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e000000c2020000d0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x80000}, {&(0x7f0000011400)="02000300b10001006752f00100010000000001006000000000000100e007", 0x1e, 0x100000}, {0x0}, {&(0x7f0000011600)="000103007700010097daf001100000007810e4070913142c1d602c340300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0x520000}, {&(0x7f0000011700)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900100000300000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000010000020", 0xf5, 0x5200e0}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="001f527f265251ff38fc933939ff0000941ac54010378fed28534e962d57645a1331890000763f720fffbeaa866e38d426a647342a6577cf63f4eaea7115338c7dd38245d26c49fe5d18340aed7b559792fe09946a462c2d6c64fe39b379dfa9207ffa1e6e3afd6f32ddadb4cf4954167c2626d59c7f6d1fcf20cd737ddee24fb415506a0a0ecc75856a55746731d7013ddbc7f0a8158423e4ba1cb3ef117607692c"]) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0xe, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x89de6d7f3346ea1c}, 0x4002011) [ 383.873622][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.962971][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.974260][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.042097][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.052264][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.079824][ T8831] device veth0_vlan entered promiscuous mode [ 384.090490][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.099616][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.143099][ T8831] device veth1_vlan entered promiscuous mode [ 384.193951][ T9095] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 384.201561][ T9095] UDF-fs: Scanning with blocksize 512 failed [ 384.248274][ T9095] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 384.255991][ T9095] UDF-fs: Scanning with blocksize 1024 failed [ 384.286573][ T9095] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 384.294094][ T9095] UDF-fs: Scanning with blocksize 2048 failed [ 384.361938][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.371526][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 384.380930][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.390715][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.431052][ T8831] device veth0_macvtap entered promiscuous mode [ 384.433284][ T9095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) [ 384.463119][ T8831] device veth1_macvtap entered promiscuous mode [ 384.479399][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.483487][ T9095] UDF-fs: error (device loop0): udf_read_inode: (ino 1344) failed !bh [ 384.489223][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 384.495363][ T9095] ===================================================== [ 384.495457][ T9095] BUG: KMSAN: uninit-value in udf_evict_inode+0x382/0x7d0 [ 384.495506][ T9095] CPU: 0 PID: 9095 Comm: syz-executor.0 Not tainted 5.9.0-rc4-syzkaller #0 [ 384.525423][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.535475][ T9095] Call Trace: [ 384.538815][ T9095] dump_stack+0x21c/0x280 [ 384.543199][ T9095] kmsan_report+0xf7/0x1e0 [ 384.547638][ T9095] __msan_warning+0x58/0xa0 [ 384.552156][ T9095] udf_evict_inode+0x382/0x7d0 [ 384.556993][ T9095] ? inode_wait_for_writeback+0x2e7/0x320 [ 384.562726][ T9095] ? kmsan_get_metadata+0x116/0x180 [ 384.567934][ T9095] ? kzalloc+0xd0/0xd0 [ 384.572049][ T9095] evict+0x4d3/0xec0 [ 384.575959][ T9095] iput+0xc7b/0xf50 [ 384.579785][ T9095] iget_failed+0x2cb/0x390 [ 384.584213][ T9095] __udf_iget+0x111d/0x4650 [ 384.588779][ T9095] ? udf_open_lvid+0x6a8/0x770 [ 384.593560][ T9095] udf_fill_super+0x2fa3/0x3330 [ 384.598474][ T9095] mount_bdev+0x622/0x910 [ 384.602808][ T9095] ? udf_mount+0xe0/0xe0 [ 384.607062][ T9095] udf_mount+0xc9/0xe0 [ 384.608928][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 384.611201][ T9095] legacy_get_tree+0x163/0x2e0 [ 384.621676][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.626296][ T9095] ? lvid_get_unique_id+0x400/0x400 [ 384.626324][ T9095] ? legacy_parse_monolithic+0x310/0x310 [ 384.626342][ T9095] vfs_get_tree+0xd8/0x5d0 [ 384.626368][ T9095] path_mount+0x3d1a/0x5d40 [ 384.626388][ T9095] ? getname_flags+0x752/0xc40 [ 384.626425][ T9095] do_mount+0x1c6/0x220 [ 384.626527][ T9095] __se_compat_sys_mount+0x7b5/0xaa0 [ 384.626558][ T9095] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 384.626582][ T9095] __ia32_compat_sys_mount+0x62/0x80 [ 384.626614][ T9095] __do_fast_syscall_32+0x129/0x180 [ 384.626637][ T9095] do_fast_syscall_32+0x6a/0xc0 [ 384.626658][ T9095] do_SYSENTER_32+0x73/0x90 [ 384.626724][ T9095] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.626738][ T9095] RIP: 0023:0xf7f06549 [ 384.626757][ T9095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 384.626768][ T9095] RSP: 002b:00000000f54fff20 EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 384.626787][ T9095] RAX: ffffffffffffffda RBX: 00000000f54fff7c RCX: 0000000020000100 [ 384.626798][ T9095] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f54fffbc [ 384.626809][ T9095] RBP: 00000000f54fff7c R08: 0000000000000000 R09: 0000000000000000 [ 384.626821][ T9095] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 384.626832][ T9095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.626850][ T9095] [ 384.626855][ T9095] Uninit was stored to memory at: [ 384.626876][ T9095] kmsan_internal_chain_origin+0xad/0x130 [ 384.626893][ T9095] __msan_chain_origin+0x50/0x90 [ 384.626909][ T9095] udf_alloc_inode+0x2ab/0x2d0 [ 384.626923][ T9095] iget_locked+0x37a/0x13f0 [ 384.626936][ T9095] __udf_iget+0x152/0x4650 [ 384.626951][ T9095] udf_fill_super+0x2fa3/0x3330 [ 384.626964][ T9095] mount_bdev+0x622/0x910 [ 384.626979][ T9095] udf_mount+0xc9/0xe0 [ 384.626996][ T9095] legacy_get_tree+0x163/0x2e0 [ 384.627041][ T9095] vfs_get_tree+0xd8/0x5d0 [ 384.640278][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.642133][ T9095] path_mount+0x3d1a/0x5d40 [ 384.678330][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.683248][ T9095] do_mount+0x1c6/0x220 [ 384.690162][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.693269][ T9095] __se_compat_sys_mount+0x7b5/0xaa0 [ 384.842575][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 384.849578][ T9095] __ia32_compat_sys_mount+0x62/0x80 [ 384.849598][ T9095] __do_fast_syscall_32+0x129/0x180 [ 384.849617][ T9095] do_fast_syscall_32+0x6a/0xc0 [ 384.849634][ T9095] do_SYSENTER_32+0x73/0x90 [ 384.849680][ T9095] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 384.853834][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.861846][ T9095] [ 384.861851][ T9095] Uninit was created at: [ 384.861872][ T9095] kmsan_save_stack_with_flags+0x3c/0x90 [ 384.861904][ T9095] kmsan_alloc_page+0xc5/0x1a0 [ 384.861956][ T9095] __alloc_pages_nodemask+0xf34/0x1120 [ 384.862013][ T9095] alloc_pages_current+0x685/0xb50 [ 384.862028][ T9095] allocate_slab+0x2fe/0x1180 [ 384.862072][ T9095] ___slab_alloc+0xd65/0x1940 [ 384.871786][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.877920][ T9095] kmem_cache_alloc+0x9fe/0xc80 [ 384.877936][ T9095] udf_alloc_inode+0x60/0x2d0 [ 384.877950][ T9095] iget_locked+0x37a/0x13f0 [ 384.877964][ T9095] __udf_iget+0x152/0x4650 [ 384.877979][ T9095] udf_fill_super+0x2fa3/0x3330 [ 384.877992][ T9095] mount_bdev+0x622/0x910 [ 384.878035][ T9095] udf_mount+0xc9/0xe0 [ 384.887948][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.888507][ T9095] legacy_get_tree+0x163/0x2e0 [ 384.895225][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.897858][ T9095] vfs_get_tree+0xd8/0x5d0 [ 385.014864][ T9095] path_mount+0x3d1a/0x5d40 [ 385.019371][ T9095] do_mount+0x1c6/0x220 [ 385.023516][ T9095] __se_compat_sys_mount+0x7b5/0xaa0 [ 385.028786][ T9095] __ia32_compat_sys_mount+0x62/0x80 [ 385.034064][ T9095] __do_fast_syscall_32+0x129/0x180 [ 385.039253][ T9095] do_fast_syscall_32+0x6a/0xc0 [ 385.044091][ T9095] do_SYSENTER_32+0x73/0x90 [ 385.048584][ T9095] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.054893][ T9095] ===================================================== [ 385.061805][ T9095] Disabling lock debugging due to kernel taint [ 385.067940][ T9095] Kernel panic - not syncing: panic_on_warn set ... [ 385.074519][ T9095] CPU: 0 PID: 9095 Comm: syz-executor.0 Tainted: G B 5.9.0-rc4-syzkaller #0 [ 385.084473][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.094512][ T9095] Call Trace: [ 385.097797][ T9095] dump_stack+0x21c/0x280 [ 385.102145][ T9095] panic+0x4d7/0xef7 [ 385.106046][ T9095] ? add_taint+0x17c/0x210 [ 385.110461][ T9095] kmsan_report+0x1df/0x1e0 [ 385.114958][ T9095] __msan_warning+0x58/0xa0 [ 385.119454][ T9095] udf_evict_inode+0x382/0x7d0 [ 385.124209][ T9095] ? inode_wait_for_writeback+0x2e7/0x320 [ 385.129921][ T9095] ? kmsan_get_metadata+0x116/0x180 [ 385.135112][ T9095] ? kzalloc+0xd0/0xd0 [ 385.139182][ T9095] evict+0x4d3/0xec0 [ 385.143074][ T9095] iput+0xc7b/0xf50 [ 385.146881][ T9095] iget_failed+0x2cb/0x390 [ 385.151290][ T9095] __udf_iget+0x111d/0x4650 [ 385.155792][ T9095] ? udf_open_lvid+0x6a8/0x770 [ 385.160554][ T9095] udf_fill_super+0x2fa3/0x3330 [ 385.165410][ T9095] mount_bdev+0x622/0x910 [ 385.169727][ T9095] ? udf_mount+0xe0/0xe0 [ 385.174077][ T9095] udf_mount+0xc9/0xe0 [ 385.178145][ T9095] legacy_get_tree+0x163/0x2e0 [ 385.182897][ T9095] ? lvid_get_unique_id+0x400/0x400 [ 385.188091][ T9095] ? legacy_parse_monolithic+0x310/0x310 [ 385.193711][ T9095] vfs_get_tree+0xd8/0x5d0 [ 385.198127][ T9095] path_mount+0x3d1a/0x5d40 [ 385.202620][ T9095] ? getname_flags+0x752/0xc40 [ 385.207389][ T9095] do_mount+0x1c6/0x220 [ 385.211543][ T9095] __se_compat_sys_mount+0x7b5/0xaa0 [ 385.216826][ T9095] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 385.222888][ T9095] __ia32_compat_sys_mount+0x62/0x80 [ 385.228170][ T9095] __do_fast_syscall_32+0x129/0x180 [ 385.233363][ T9095] do_fast_syscall_32+0x6a/0xc0 [ 385.238217][ T9095] do_SYSENTER_32+0x73/0x90 [ 385.242713][ T9095] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 385.249025][ T9095] RIP: 0023:0xf7f06549 [ 385.253096][ T9095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 385.272684][ T9095] RSP: 002b:00000000f54fff20 EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 385.281087][ T9095] RAX: ffffffffffffffda RBX: 00000000f54fff7c RCX: 0000000020000100 [ 385.289048][ T9095] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f54fffbc [ 385.297007][ T9095] RBP: 00000000f54fff7c R08: 0000000000000000 R09: 0000000000000000 [ 385.304978][ T9095] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 385.312935][ T9095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.322044][ T9095] Kernel Offset: disabled [ 385.326359][ T9095] Rebooting in 86400 seconds..