[ 66.151037][ T26] audit: type=1800 audit(1565575460.138:27): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 66.171818][ T26] audit: type=1800 audit(1565575460.138:28): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.825051][ T26] audit: type=1800 audit(1565575460.878:29): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 66.845385][ T26] audit: type=1800 audit(1565575460.878:30): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. 2019/08/12 02:04:31 fuzzer started 2019/08/12 02:04:33 dialing manager at 10.128.0.26:43421 2019/08/12 02:04:34 syscalls: 2487 2019/08/12 02:04:34 code coverage: enabled 2019/08/12 02:04:34 comparison tracing: enabled 2019/08/12 02:04:34 extra coverage: extra coverage is not supported by the kernel 2019/08/12 02:04:34 setuid sandbox: enabled 2019/08/12 02:04:34 namespace sandbox: enabled 2019/08/12 02:04:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/12 02:04:34 fault injection: enabled 2019/08/12 02:04:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/12 02:04:34 net packet injection: enabled 2019/08/12 02:04:34 net device setup: enabled 02:06:03 executing program 0: 02:06:03 executing program 1: syzkaller login: [ 169.368023][T10348] IPVS: ftp: loaded support on port[0] = 21 [ 169.430239][T10350] IPVS: ftp: loaded support on port[0] = 21 02:06:03 executing program 2: [ 169.569133][T10348] chnl_net:caif_netlink_parms(): no params data found [ 169.607791][T10350] chnl_net:caif_netlink_parms(): no params data found [ 169.678112][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.700996][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.708961][T10348] device bridge_slave_0 entered promiscuous mode [ 169.744691][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.756665][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.764862][T10348] device bridge_slave_1 entered promiscuous mode [ 169.778426][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.786927][T10350] bridge0: port 1(bridge_slave_0) entered disabled state 02:06:03 executing program 3: [ 169.796059][T10350] device bridge_slave_0 entered promiscuous mode [ 169.822761][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.830847][T10355] IPVS: ftp: loaded support on port[0] = 21 [ 169.841456][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.849361][T10350] device bridge_slave_1 entered promiscuous mode [ 169.858649][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.894003][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.914357][T10350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.943740][T10350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.961976][T10348] team0: Port device team_slave_0 added [ 169.984515][T10348] team0: Port device team_slave_1 added [ 169.994634][T10350] team0: Port device team_slave_0 added [ 170.014103][T10350] team0: Port device team_slave_1 added [ 170.034409][T10357] IPVS: ftp: loaded support on port[0] = 21 02:06:04 executing program 4: [ 170.122600][T10348] device hsr_slave_0 entered promiscuous mode [ 170.171224][T10348] device hsr_slave_1 entered promiscuous mode 02:06:04 executing program 5: [ 170.333505][T10350] device hsr_slave_0 entered promiscuous mode [ 170.380150][T10350] device hsr_slave_1 entered promiscuous mode [ 170.419892][T10350] debugfs: Directory 'hsr0' with parent '/' already present! [ 170.431511][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.438626][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.446054][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.453165][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.487901][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.495031][T10350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.502402][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.509470][T10350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.551925][T10361] IPVS: ftp: loaded support on port[0] = 21 [ 170.554928][T10359] IPVS: ftp: loaded support on port[0] = 21 [ 170.561812][T10355] chnl_net:caif_netlink_parms(): no params data found [ 170.581505][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.589219][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.597128][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.604651][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.722671][T10357] chnl_net:caif_netlink_parms(): no params data found [ 170.750300][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.757386][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.765559][T10355] device bridge_slave_0 entered promiscuous mode [ 170.775195][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.782778][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.791057][T10355] device bridge_slave_1 entered promiscuous mode [ 170.826752][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.842901][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.858901][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.895965][T10357] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.904189][T10357] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.912123][T10357] device bridge_slave_0 entered promiscuous mode [ 170.920909][T10357] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.927977][T10357] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.935909][T10357] device bridge_slave_1 entered promiscuous mode [ 170.944061][T10355] team0: Port device team_slave_0 added [ 170.951965][T10355] team0: Port device team_slave_1 added [ 170.971874][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.998699][T10357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.051526][T10355] device hsr_slave_0 entered promiscuous mode [ 171.100472][T10355] device hsr_slave_1 entered promiscuous mode [ 171.159961][T10355] debugfs: Directory 'hsr0' with parent '/' already present! [ 171.174659][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.185671][T10357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.199365][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.208869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.216713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.225117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.232974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.286337][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.295746][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.304391][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.311639][T10362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.346910][T10357] team0: Port device team_slave_0 added [ 171.356730][T10357] team0: Port device team_slave_1 added [ 171.371942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.381197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.389593][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.396693][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.404633][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.424065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.433480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.442098][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.449171][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.457178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.466082][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.474797][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.481853][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.503272][T10359] chnl_net:caif_netlink_parms(): no params data found [ 171.532369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.541433][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.559705][T10361] chnl_net:caif_netlink_parms(): no params data found [ 171.632047][T10357] device hsr_slave_0 entered promiscuous mode [ 171.670330][T10357] device hsr_slave_1 entered promiscuous mode [ 171.710217][T10357] debugfs: Directory 'hsr0' with parent '/' already present! [ 171.729564][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.737324][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.745309][T10359] device bridge_slave_0 entered promiscuous mode [ 171.760886][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.769537][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.778337][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.787068][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.801458][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.809966][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.818514][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.827955][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.836369][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.844685][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.852992][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.861301][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.869249][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.883336][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.891250][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.898942][T10359] device bridge_slave_1 entered promiscuous mode [ 171.919323][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.934653][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.943558][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.957039][T10348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.968323][T10348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.989315][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.015416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.023888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.033011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.041379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.049820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.060476][T10350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.078590][T10359] team0: Port device team_slave_0 added [ 172.085354][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.092614][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.100621][T10361] device bridge_slave_0 entered promiscuous mode [ 172.117312][T10355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.139865][T10350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.152369][T10359] team0: Port device team_slave_1 added [ 172.158341][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.165891][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.174590][T10361] device bridge_slave_1 entered promiscuous mode [ 172.188775][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.205229][T10355] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.219443][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.233711][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.263156][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.274923][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.362955][T10359] device hsr_slave_0 entered promiscuous mode [ 172.390625][T10359] device hsr_slave_1 entered promiscuous mode [ 172.440022][T10359] debugfs: Directory 'hsr0' with parent '/' already present! [ 172.454434][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.463315][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.471918][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.479129][T10354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.499482][T10357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.521783][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.536337][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:06:06 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 172.555582][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.567283][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.574409][T10362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.575311][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.591063][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.602703][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.616976][T10382] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 172.620627][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.640578][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 02:06:06 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 172.649351][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.672144][T10357] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.687471][T10361] team0: Port device team_slave_0 added [ 172.696123][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.718954][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.751276][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 02:06:06 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:06 executing program 1: [ 172.763703][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.783252][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.803698][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 02:06:06 executing program 1: [ 172.820417][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.841669][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:06:06 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:06 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') [ 172.866984][T10361] team0: Port device team_slave_1 added [ 172.948400][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.963945][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.987417][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.987676][T10398] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 172.994872][T10362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.996637][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.010573][T10398] UDF-fs: Scanning with blocksize 512 failed [ 173.023618][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.041541][T10398] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.045462][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.049465][T10398] UDF-fs: Scanning with blocksize 1024 failed [ 173.056801][T10362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.063492][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.084521][T10398] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 02:06:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 173.090577][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.100426][T10398] UDF-fs: Scanning with blocksize 2048 failed [ 173.101097][T10398] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 173.119284][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.130372][T10398] UDF-fs: Scanning with blocksize 4096 failed [ 173.174537][T10355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.230712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.282645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.387612][T10361] device hsr_slave_0 entered promiscuous mode [ 173.460603][T10361] device hsr_slave_1 entered promiscuous mode [ 173.490294][T10361] debugfs: Directory 'hsr0' with parent '/' already present! [ 173.499923][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.508204][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.519669][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.528634][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.538042][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.547474][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.556181][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.582793][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.598500][T10357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.677043][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.685826][T10362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.697049][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.718447][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.727068][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.735663][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.742861][T10364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.751753][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.765040][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.773909][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.782514][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.789561][T10368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.807512][T10357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.815777][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:06:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) lseek(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) [ 173.850298][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.858993][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.884699][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.894018][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.904607][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.913114][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.921732][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.930883][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.943138][T10359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.961463][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.970591][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.993180][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.014784][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.022562][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.031868][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.045862][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.058540][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.070608][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.079007][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.086097][T10354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.094615][T10354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:06:08 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @random="b0215e20b322", 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 174.113816][T10377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.126581][T10377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.146084][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.153223][T10377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.223260][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.240945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.255676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.265340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.277355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.286722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.298713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 02:06:08 executing program 4: [ 174.328717][T10361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.360320][T10361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.394014][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.402971][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.420608][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.429043][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.437963][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.455714][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 02:06:08 executing program 5: 02:06:08 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x1008000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x0, 0xfff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f0000005280)={0x8, "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", 0x1000}, 0x1006) 02:06:08 executing program 3: 02:06:08 executing program 4: 02:06:08 executing program 3: 02:06:08 executing program 4: 02:06:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 174.644155][T10448] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 02:06:08 executing program 5: [ 174.692152][T10448] UDF-fs: Scanning with blocksize 512 failed [ 174.722493][T10448] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 02:06:08 executing program 4: 02:06:08 executing program 3: [ 174.748387][T10448] UDF-fs: Scanning with blocksize 1024 failed [ 174.802163][T10448] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 174.832279][T10448] UDF-fs: Scanning with blocksize 2048 failed 02:06:08 executing program 3: [ 174.875735][T10448] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 174.915943][T10448] UDF-fs: Scanning with blocksize 4096 failed 02:06:09 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:09 executing program 2: 02:06:09 executing program 5: 02:06:09 executing program 4: 02:06:09 executing program 0: capset(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:09 executing program 3: 02:06:09 executing program 5: 02:06:09 executing program 4: 02:06:09 executing program 2: 02:06:09 executing program 3: [ 175.106257][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.118025][T10481] UDF-fs: Scanning with blocksize 512 failed 02:06:09 executing program 0: capset(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) [ 175.153031][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 02:06:09 executing program 3: [ 175.256730][T10481] UDF-fs: Scanning with blocksize 1024 failed [ 175.292377][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.320886][T10481] UDF-fs: Scanning with blocksize 2048 failed 02:06:09 executing program 5: 02:06:09 executing program 4: 02:06:09 executing program 2: 02:06:09 executing program 0: capset(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:09 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:09 executing program 3: [ 175.376097][T10481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.398057][T10481] UDF-fs: Scanning with blocksize 4096 failed 02:06:09 executing program 4: 02:06:09 executing program 5: 02:06:09 executing program 2: 02:06:09 executing program 3: 02:06:09 executing program 4: 02:06:09 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:09 executing program 2: [ 175.634776][T10516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 02:06:09 executing program 5: 02:06:09 executing program 3: 02:06:09 executing program 4: [ 175.777231][T10516] UDF-fs: Scanning with blocksize 512 failed [ 175.813741][T10516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.881158][T10516] UDF-fs: Scanning with blocksize 1024 failed [ 175.893608][T10516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.901774][T10516] UDF-fs: Scanning with blocksize 2048 failed [ 175.913227][T10516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 175.922658][T10516] UDF-fs: Scanning with blocksize 4096 failed 02:06:10 executing program 1: mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:10 executing program 2: 02:06:10 executing program 3: 02:06:10 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:10 executing program 5: 02:06:10 executing program 4: 02:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 02:06:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) 02:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000040000800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x0, 0x0, 0x1000000000055}, 0x98) 02:06:10 executing program 1: mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:10 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000300)={0x100}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 02:06:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) 02:06:10 executing program 1: mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:10 executing program 0: capset(&(0x7f0000000080)={0x19980330}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 02:06:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) 02:06:10 executing program 0: capset(&(0x7f0000000080)={0x19980330}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:10 executing program 4: syz_emit_ethernet(0x140, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 02:06:10 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) 02:06:11 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000680)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) 02:06:11 executing program 0: capset(&(0x7f0000000080)={0x19980330}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x66, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffffffffffd02}, 0x48) 02:06:11 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) 02:06:11 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x15b3b}], 0x1}, 0x0) close(r0) 02:06:11 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) 02:06:11 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:06:11 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xd, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) 02:06:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e10000000120a43ba5d806055b6fdd80b", 0x34}], 0x1}, 0x0) [ 177.250763][ C1] hrtimer: interrupt took 23431 ns 02:06:11 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)='\x00') 02:06:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) [ 177.381841][T10616] syz-executor.2 (10616) used greatest stack depth: 22328 bytes left [ 177.455308][T10348] WARNING: CPU: 1 PID: 10348 at fs/block_dev.c:1899 __blkdev_put+0x6ba/0x810 [ 177.456209][ T3880] kobject: 'loop0' (0000000042f1fa6e): kobject_uevent_env [ 177.464110][T10348] Kernel panic - not syncing: panic_on_warn set ... [ 177.464125][T10348] CPU: 1 PID: 10348 Comm: syz-executor.0 Not tainted 5.3.0-rc3-next-20190809 #63 [ 177.464132][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.464136][T10348] Call Trace: [ 177.464160][T10348] dump_stack+0x172/0x1f0 [ 177.464177][T10348] ? __blkdev_put+0x5d0/0x810 [ 177.464205][T10348] panic+0x2dc/0x755 [ 177.464219][T10348] ? add_taint.cold+0x16/0x16 [ 177.464236][T10348] ? __kasan_check_write+0x14/0x20 [ 177.464290][T10348] ? __warn.cold+0x5/0x4c [ 177.464298][T10348] ? __warn+0xe7/0x1e0 [ 177.464306][T10348] ? __blkdev_put+0x6ba/0x810 [ 177.464313][T10348] __warn.cold+0x20/0x4c [ 177.464320][T10348] ? __blkdev_put+0x6ba/0x810 [ 177.464327][T10348] report_bug+0x263/0x2b0 [ 177.464346][T10348] do_error_trap+0x11b/0x200 [ 177.464354][T10348] do_invalid_op+0x37/0x50 [ 177.464360][T10348] ? __blkdev_put+0x6ba/0x810 [ 177.464370][T10348] invalid_op+0x23/0x30 [ 177.464378][T10348] RIP: 0010:__blkdev_put+0x6ba/0x810 [ 177.464387][T10348] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 84 24 fd ff ff 48 8b bd 50 ff ff ff e8 90 5d e6 ff e9 13 fd ff ff e8 46 6f ab ff <0f> 0b e9 dc fa ff ff 48 89 cf e8 57 5d e6 ff e9 6a fa ff ff 48 8b [ 177.464391][T10348] RSP: 0018:ffff88808e2d7c90 EFLAGS: 00010293 [ 177.464398][T10348] RAX: ffff88808ad6e6c0 RBX: ffff8880a6a34700 RCX: ffffffff81c6a4c4 [ 177.464402][T10348] RDX: 0000000000000000 RSI: ffffffff81c6a9ea RDI: 0000000000000005 [ 177.464407][T10348] RBP: ffff88808e2d7d88 R08: ffff88808ad6e6c0 R09: ffffed1014d468e4 [ 177.464411][T10348] R10: ffff88808e2d7c80 R11: ffff8880a6a3471f R12: 0000000000000002 [ 177.464415][T10348] R13: dffffc0000000000 R14: ffff8880a6a34718 R15: ffff8880a6a34718 [ 177.464424][T10348] ? __blkdev_put+0x194/0x810 [ 177.464430][T10348] ? __blkdev_put+0x6ba/0x810 [ 177.464441][T10348] ? bd_set_size+0xb0/0xb0 [ 177.464448][T10348] ? wait_for_completion+0x440/0x440 [ 177.464458][T10348] blkdev_put+0x98/0x560 [ 177.464468][T10348] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 177.464475][T10348] blkdev_close+0x8b/0xb0 [ 177.464490][T10348] __fput+0x2ff/0x890 [ 177.464498][T10348] ? blkdev_put+0x560/0x560 [ 177.464505][T10348] ____fput+0x16/0x20 [ 177.464517][T10348] task_work_run+0x145/0x1c0 [ 177.464530][T10348] exit_to_usermode_loop+0x316/0x380 [ 177.464538][T10348] do_syscall_64+0x65f/0x760 [ 177.464548][T10348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.464554][T10348] RIP: 0033:0x4134f0 [ 177.464561][T10348] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 177.464565][T10348] RSP: 002b:00007fffb4675d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 177.464571][T10348] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004134f0 [ 177.464575][T10348] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 177.464579][T10348] RBP: 0000000000000023 R08: 0000000000000000 R09: 000000000000000a [ 177.464583][T10348] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 177.464587][T10348] R13: 00007fffb4675d60 R14: 000000000002b3e4 R15: 00007fffb4675d70 [ 177.473225][T10348] Kernel Offset: disabled [ 177.820531][T10348] Rebooting in 86400 seconds..