Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts.
2019/08/27 15:04:04 fuzzer started
2019/08/27 15:04:07 dialing manager at 10.128.0.26:45029
2019/08/27 15:04:07 syscalls: 2487
2019/08/27 15:04:07 code coverage: enabled
2019/08/27 15:04:07 comparison tracing: enabled
2019/08/27 15:04:07 extra coverage: extra coverage is not supported by the kernel
2019/08/27 15:04:07 setuid sandbox: enabled
2019/08/27 15:04:07 namespace sandbox: enabled
2019/08/27 15:04:07 Android sandbox: /sys/fs/selinux/policy does not exist
2019/08/27 15:04:07 fault injection: enabled
2019/08/27 15:04:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/08/27 15:04:07 net packet injection: enabled
2019/08/27 15:04:07 net device setup: enabled
15:06:41 executing program 0:

15:06:41 executing program 1:

syzkaller login: [  224.998420][ T8777] IPVS: ftp: loaded support on port[0] = 21
[  225.122211][ T8777] chnl_net:caif_netlink_parms(): no params data found
[  225.141293][ T8779] IPVS: ftp: loaded support on port[0] = 21
[  225.169060][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.176747][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.185118][ T8777] device bridge_slave_0 entered promiscuous mode
[  225.196644][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.204183][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.213368][ T8777] device bridge_slave_1 entered promiscuous mode
15:06:41 executing program 2:

[  225.240092][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.260094][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.310263][ T8777] team0: Port device team_slave_0 added
[  225.326052][ T8777] team0: Port device team_slave_1 added
15:06:42 executing program 3:

[  225.480053][ T8777] device hsr_slave_0 entered promiscuous mode
[  225.528274][ T8777] device hsr_slave_1 entered promiscuous mode
[  225.599125][ T8779] chnl_net:caif_netlink_parms(): no params data found
[  225.609445][ T8783] IPVS: ftp: loaded support on port[0] = 21
[  225.627250][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.634694][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.642752][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.649907][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.681898][ T8785] IPVS: ftp: loaded support on port[0] = 21
[  225.754745][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.763164][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.773642][ T8779] device bridge_slave_0 entered promiscuous mode
[  225.805063][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.815426][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.823962][ T8779] device bridge_slave_1 entered promiscuous mode
15:06:42 executing program 4:

[  225.898414][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.922866][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.026812][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.057590][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  226.077375][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.096414][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.111070][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
15:06:42 executing program 5:

[  226.136618][ T8777] 8021q: adding VLAN 0 to HW filter on device team0
[  226.162246][ T8785] chnl_net:caif_netlink_parms(): no params data found
[  226.164113][ T8789] IPVS: ftp: loaded support on port[0] = 21
[  226.256033][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  226.269511][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  226.280312][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.287547][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.296585][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  226.305731][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  226.314885][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.322107][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.330263][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.340396][ T8779] team0: Port device team_slave_0 added
[  226.353047][ T8783] chnl_net:caif_netlink_parms(): no params data found
[  226.366677][ T8779] team0: Port device team_slave_1 added
[  226.396021][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.419799][ T8793] IPVS: ftp: loaded support on port[0] = 21
[  226.459880][ T8779] device hsr_slave_0 entered promiscuous mode
[  226.507290][ T8779] device hsr_slave_1 entered promiscuous mode
[  226.557174][ T8779] debugfs: Directory 'hsr0' with parent '/' already present!
[  226.573136][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.583743][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.592481][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.601249][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.609756][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.618216][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.626409][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.635063][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.644231][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.682834][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.690765][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.699150][ T8785] device bridge_slave_0 entered promiscuous mode
[  226.734696][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.743473][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.753978][ T8785] device bridge_slave_1 entered promiscuous mode
[  226.761786][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  226.834575][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.843237][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.851612][ T8783] device bridge_slave_0 entered promiscuous mode
[  226.860458][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.875574][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.901802][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.910497][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.919270][ T8783] device bridge_slave_1 entered promiscuous mode
[  226.954241][ T8789] chnl_net:caif_netlink_parms(): no params data found
[  226.986084][ T8785] team0: Port device team_slave_0 added
[  227.004787][ T8785] team0: Port device team_slave_1 added
[  227.018634][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.049474][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.074054][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.084155][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.150147][ T8785] device hsr_slave_0 entered promiscuous mode
[  227.187459][ T8785] device hsr_slave_1 entered promiscuous mode
[  227.227223][ T8785] debugfs: Directory 'hsr0' with parent '/' already present!
[  227.244900][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.252299][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.260553][ T8789] device bridge_slave_0 entered promiscuous mode
[  227.325937][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.333751][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.347436][ T8789] device bridge_slave_1 entered promiscuous mode
[  227.358174][ T8783] team0: Port device team_slave_0 added
[  227.372255][ T8779] 8021q: adding VLAN 0 to HW filter on device team0
[  227.383091][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.391136][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.409985][ T8783] team0: Port device team_slave_1 added
[  227.424562][ T8793] chnl_net:caif_netlink_parms(): no params data found
[  227.460064][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.493869][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
15:06:44 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x8080)

[  227.504683][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
15:06:44 executing program 0:
getpid()
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/82, &(0x7f00000001c0)=0x52)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
fallocate(0xffffffffffffffff, 0x0, 0x6, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
ftruncate(r1, 0xd3)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x0, "f36acfe634ed52cc"})
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000400)={0x0, 0x95, 0xfff, 0x784, 0x8000, "46443b1a150eb5df0a6f3cad5494cd4f1ea32d", 0x1df, 0xf03})

[  227.546571][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.553748][ T8786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.593602][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  227.606670][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.615433][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.622666][ T8786] bridge0: port 2(bridge_slave_1) entered forwarding state
15:06:44 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

[  227.650656][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.710466][ T8783] device hsr_slave_0 entered promiscuous mode
[  227.767459][ T8783] device hsr_slave_1 entered promiscuous mode
[  227.809717][ T8783] debugfs: Directory 'hsr0' with parent '/' already present!
[  227.818316][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  227.826445][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  227.835284][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  227.854942][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.862386][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.871109][ T8793] device bridge_slave_0 entered promiscuous mode
[  227.883499][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.891712][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.900057][ T8793] device bridge_slave_1 entered promiscuous mode
15:06:44 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}, {0x0}], 0x2}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d)
shutdown(r3, 0x0)
r5 = socket$inet6_sctp(0x1c, 0x3, 0x84)
readv(r5, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}], 0x2)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

[  227.930345][ T8789] team0: Port device team_slave_0 added
[  227.943893][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.954132][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.998805][ T8789] team0: Port device team_slave_1 added
[  228.009399][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  228.019023][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.027847][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.036413][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.045126][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.057606][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.066072][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.085819][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.097799][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.113125][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.144679][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.165480][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.174047][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.189639][ T8785] 8021q: adding VLAN 0 to HW filter on device team0
15:06:44 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

[  228.251549][ T8789] device hsr_slave_0 entered promiscuous mode
[  228.297457][ T8789] device hsr_slave_1 entered promiscuous mode
[  228.327170][ T8789] debugfs: Directory 'hsr0' with parent '/' already present!
[  228.339113][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.356520][ T8793] team0: Port device team_slave_0 added
[  228.366742][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.375862][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.384484][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.391609][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.420136][ T8793] team0: Port device team_slave_1 added
[  228.437666][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.446204][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.455307][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
15:06:45 executing program 0:
r0 = socket$kcm(0x10, 0x4000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000018008109e00f80ecdb4cb92e0a60022c000cd302e8bd6efb120009000e0014a00200000005000500fe80", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

[  228.464769][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.471965][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.480603][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  228.489739][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  228.498825][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  228.507874][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  228.538319][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.620417][ T8793] device hsr_slave_0 entered promiscuous mode
[  228.657239][ T8793] device hsr_slave_1 entered promiscuous mode
[  228.717290][ T8793] debugfs: Directory 'hsr0' with parent '/' already present!
[  228.732769][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  228.741777][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.751014][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.760302][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.769220][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.778279][ T8833] IPv6: Can't replace route, no match found
[  228.791633][ T8785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
15:06:45 executing program 1:
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = fcntl$dupfd(r0, 0x0, r0)
read(r1, &(0x7f0000000300)=""/227, 0xe3)
r2 = dup(r0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r3, 0x0, 0xfffffdbe, 0x0, 0x0, 0x800e00516)
shutdown(r2, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r4, &(0x7f0000002600)=[{&(0x7f00000000c0)=""/50, 0x32}, {0x0}, {0x0}], 0x3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r5, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e)
shutdown(r4, 0x0)
nanosleep(&(0x7f0000000000)={0x400}, &(0x7f0000000040))
shutdown(r5, 0x0)
shutdown(r3, 0x0)

15:06:45 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x8})

[  228.821579][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.856755][ T8783] 8021q: adding VLAN 0 to HW filter on device team0
[  228.902795][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.937336][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.945772][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.959691][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.025549][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.033488][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.044304][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.054525][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.061700][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.076132][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.085110][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.094126][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.101242][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.109477][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.127666][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.135597][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.158484][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.175748][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.185574][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.201295][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.221724][ T8783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.233068][ T8783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.250518][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.260595][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.270173][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.279531][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.288889][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.298182][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.306590][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.338441][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.358137][ T8789] 8021q: adding VLAN 0 to HW filter on device team0
[  229.365461][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.374382][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.422915][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.446155][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.456338][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.463598][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.485886][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.494902][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.503570][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.510867][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.519417][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.528415][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.549729][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.562313][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.570686][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.582999][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.591761][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.601527][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.616037][ T8789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.628301][ T8789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.647842][ T8793] 8021q: adding VLAN 0 to HW filter on device team0
[  229.655030][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.663674][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.672295][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
15:06:46 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{}, {0xffffffff}})

15:06:46 executing program 0:
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$alg(0x26, 0x5, 0x0)
ioctl(r0, 0x2, &(0x7f0000000340))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2572758eee434ad)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004840)={'bridge_slave_1\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000004880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000048c0)=0x14)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x80, 0x0}, 0x0)
preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  229.681402][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.697146][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.705597][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.717966][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.770105][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.784663][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.818335][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.827019][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.834141][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.841985][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.850956][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.859685][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.866800][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.875199][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.891676][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.923433][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  229.934265][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.994083][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.004171][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.013718][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  230.023467][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  230.032665][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  230.043582][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.052589][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  230.065059][ T8793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.077803][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.100263][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  230.109692][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  230.123468][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0
15:06:46 executing program 4:
bind$packet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000540)='./file0\x00')

15:06:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)

15:06:46 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='gfs2meta\x00', 0x0, &(0x7f0000000500)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13')

15:06:46 executing program 2:
r0 = msgget(0x1, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x0)

15:06:46 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x303, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="3d0000006f00000400000000000000000000000000000000000000000000000000fb8a30fb00"/49], 0x31)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x81, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0)

15:06:46 executing program 0:
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x80, 0x0}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[  230.390988][    C0] hrtimer: interrupt took 35929 ns
15:06:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)

[  230.446071][ T8887] gfs2meta: Unknown parameter 'mem'
[  230.473526][ T8897] gfs2meta: Unknown parameter 'mem'
15:06:47 executing program 5:
r0 = msgget(0x1, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)

15:06:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)

15:06:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

15:06:47 executing program 4:
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

15:06:47 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000780)='}', 0x1, 0x0, 0x0, 0x0)

15:06:47 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
rt_sigreturn()

15:06:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/9, 0x9}], 0x1)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
shutdown(r1, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/41, 0x29}], 0x1}, 0x0)
r5 = dup(r4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r6, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e)
shutdown(r5, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r7, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/206, 0xce}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5)
shutdown(r6, 0x0)
shutdown(r3, 0x0)

[  231.002820][ T8928] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:06:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}, {0x0}, {0x0}], 0x3}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d)
shutdown(r3, 0x0)
r5 = socket$inet6_sctp(0x1c, 0x3, 0x84)
readv(r5, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

[  231.198259][ T8889] EXT4-fs (loop1): Unrecognized mount option "À
Ð" or missing value
[  231.253680][ T8889] EXT4-fs (loop1): failed to parse options in superblock: À
Ð
[  231.307180][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  231.307185][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  231.307267][    C1] protocol 88fb is buggy, dev hsr_slave_1
15:06:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/14, 0xe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x42)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00505)
shutdown(r1, 0x0)
accept4$inet6(r1, 0x0, 0x0, 0x0)
recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e)
shutdown(r2, 0x0)

[  231.349120][ T8889] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  231.437552][ T8889] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  231.469025][ T8889] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  231.485933][ T8889] EXT4-fs: failed to create workqueue
[  231.509969][ T8889] EXT4-fs (loop1): mount failed
[  231.520639][ T8889] ------------[ cut here ]------------
[  231.526199][ T8889] ODEBUG: free active (active state 0) object type: percpu_counter hint: 0x0
[  231.535285][ T8889] WARNING: CPU: 1 PID: 8889 at lib/debugobjects.c:481 debug_print_object+0x168/0x250
[  231.544945][ T8889] Kernel panic - not syncing: panic_on_warn set ...
[  231.551542][ T8889] CPU: 1 PID: 8889 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190826 #73
[  231.560555][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  231.570693][ T8889] Call Trace:
[  231.574007][ T8889]  dump_stack+0x172/0x1f0
[  231.578341][ T8889]  ? debug_print_object+0x90/0x250
[  231.583541][ T8889]  panic+0x2dc/0x755
[  231.587435][ T8889]  ? add_taint.cold+0x16/0x16
[  231.592126][ T8889]  ? __kasan_check_write+0x14/0x20
[  231.597320][ T8889]  ? __warn.cold+0x14/0x3c
[  231.601749][ T8889]  ? debug_print_object+0x168/0x250
[  231.607035][ T8889]  __warn.cold+0x2f/0x3c
[  231.611456][ T8889]  ? debug_print_object+0x168/0x250
[  231.616660][ T8889]  report_bug+0x289/0x300
[  231.621005][ T8889]  do_error_trap+0x11b/0x200
[  231.625622][ T8889]  do_invalid_op+0x37/0x50
[  231.630039][ T8889]  ? debug_print_object+0x168/0x250
[  231.635251][ T8889]  invalid_op+0x23/0x30
[  231.639410][ T8889] RIP: 0010:debug_print_object+0x168/0x250
[  231.645215][ T8889] Code: dd 60 6c e6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 6c e6 87 48 c7 c7 c0 61 e6 87 e8 20 31 01 fe <0f> 0b 83 05 f3 67 83 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3
[  231.665263][ T8889] RSP: 0018:ffff88805b1bf938 EFLAGS: 00010086
[  231.671337][ T8889] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  231.679322][ T8889] RDX: 0000000000040000 RSI: ffffffff815bd606 RDI: ffffed100b637f19
[  231.688256][ T8889] RBP: ffff88805b1bf978 R08: ffff8880a889c240 R09: ffffed1015d24109
[  231.696327][ T8889] R10: ffffed1015d24108 R11: ffff8880ae920847 R12: 0000000000000001
[  231.704422][ T8889] R13: ffffffff8935e800 R14: 0000000000000000 R15: ffff88809a28c348
[  231.712435][ T8889]  ? vprintk_func+0x86/0x189
[  231.717043][ T8889]  ? debug_print_object+0x168/0x250
[  231.722267][ T8889]  debug_check_no_obj_freed+0x2d4/0x43f
[  231.728529][ T8889]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  231.735049][ T8889]  kfree+0xf8/0x2c0
[  231.739147][ T8889]  ext4_fill_super+0x8cb/0xcc80
[  231.744014][ T8889]  ? ext4_calculate_overhead+0x1250/0x1250
[  231.750170][ T8889]  ? vsprintf+0x40/0x40
[  231.754331][ T8889]  ? wait_for_completion+0x440/0x440
[  231.759883][ T8889]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  231.765609][ T8889]  ? set_blocksize+0x2bf/0x340
[  231.770500][ T8889]  mount_bdev+0x304/0x3c0
[  231.774849][ T8889]  ? mount_bdev+0x304/0x3c0
[  231.779422][ T8889]  ? ext4_calculate_overhead+0x1250/0x1250
[  231.785221][ T8889]  ext4_mount+0x35/0x40
[  231.789487][ T8889]  ? ext4_nfs_get_inode+0xe0/0xe0
[  231.794604][ T8889]  legacy_get_tree+0x113/0x220
[  231.799618][ T8889]  ? ns_capable_common+0x93/0x100
[  231.804643][ T8889]  vfs_get_tree+0x8f/0x380
[  231.809056][ T8889]  do_mount+0x13b3/0x1c30
[  231.813380][ T8889]  ? copy_mount_string+0x40/0x40
[  231.818318][ T8889]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  231.824567][ T8889]  ? copy_mount_options+0x2e8/0x3f0
[  231.829843][ T8889]  ksys_mount+0xdb/0x150
[  231.834184][ T8889]  __x64_sys_mount+0xbe/0x150
[  231.838945][ T8889]  do_syscall_64+0xfa/0x760
[  231.843562][ T8889]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  231.849600][ T8889] RIP: 0033:0x45c2ca
[  231.853679][ T8889] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00
[  231.873398][ T8889] RSP: 002b:00007f9cbf63ba88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  231.881903][ T8889] RAX: ffffffffffffffda RBX: 00007f9cbf63bb40 RCX: 000000000045c2ca
[  231.889870][ T8889] RDX: 00007f9cbf63bae0 RSI: 0000000020000000 RDI: 00007f9cbf63bb00
[  231.897831][ T8889] RBP: 0000000000001000 R08: 00007f9cbf63bb40 R09: 00007f9cbf63bae0
[  231.905810][ T8889] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000007
[  231.913954][ T8889] R13: 00000000004c89d6 R14: 00000000004df8f8 R15: 00000000ffffffff
[  231.924041][ T8889] Kernel Offset: disabled
[  231.928661][ T8889] Rebooting in 86400 seconds..