[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.330576][ T27] audit: type=1800 audit(1575288983.963:25): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.350470][ T27] audit: type=1800 audit(1575288983.963:26): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.376973][ T27] audit: type=1800 audit(1575288983.973:27): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. 2019/12/02 12:16:35 fuzzer started 2019/12/02 12:16:37 dialing manager at 10.128.0.26:38631 2019/12/02 12:16:37 syscalls: 2678 2019/12/02 12:16:37 code coverage: enabled 2019/12/02 12:16:37 comparison tracing: enabled 2019/12/02 12:16:37 extra coverage: enabled 2019/12/02 12:16:37 setuid sandbox: enabled 2019/12/02 12:16:37 namespace sandbox: enabled 2019/12/02 12:16:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 12:16:37 fault injection: enabled 2019/12/02 12:16:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 12:16:37 net packet injection: enabled 2019/12/02 12:16:37 net device setup: enabled 2019/12/02 12:16:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 12:16:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:18:37 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES32, @ANYPTR, @ANYBLOB="5d3453f301d2d6a2d0e7d2c8f67fbd2e5227feda4456e9a017056a52fd4919c7aeff72901879a424f2da5d8bb421c33e0b87af23ee8e1d6a9facaed79531371b182e22f1699dbbcfa2f573c0e79871be9f65e2118140daf6edc73312c55f914b403060177496e3c7010058f5a2020000004ebe9dc8cb1ccc52368318e34d3f3d4590ffc289ec7f4b78a6a5d175c3630ea8ef3a", @ANYRES64, @ANYRES16, @ANYRES32]], @ANYRES64], 0xfffffd62) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17) splice(r0, 0x0, r2, 0x0, 0x100000000000a, 0x0) 12:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/25, 0x19}, {0x0}, {0x0}], 0x3}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x0, 0x0) r4 = dup(r3) shutdown(r4, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r6 = dup2(r5, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000140)={0x0, 0x7f, 0xfffffffd, 0x294, 0x0, 0x9, 0x7ff, 0x0, {0x0, @in, 0x80000000, 0xc00000, 0x46, 0xfff}}, &(0x7f0000000200)=0xb8) shutdown(r2, 0x0) readv(r2, &(0x7f0000000040), 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, &(0x7f0000000000)={0x4d1}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) syzkaller login: [ 192.843951][ T8866] IPVS: ftp: loaded support on port[0] = 21 [ 193.044502][ T8870] IPVS: ftp: loaded support on port[0] = 21 [ 193.058164][ T8866] chnl_net:caif_netlink_parms(): no params data found 12:18:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 193.145507][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.154260][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.162835][ T8866] device bridge_slave_0 entered promiscuous mode [ 193.188189][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.196121][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.204253][ T8866] device bridge_slave_1 entered promiscuous mode [ 193.311399][ T8866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.332538][ T8870] chnl_net:caif_netlink_parms(): no params data found [ 193.360188][ T8866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:18:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x24}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 193.436781][ T8866] team0: Port device team_slave_0 added [ 193.456957][ T8866] team0: Port device team_slave_1 added [ 193.462835][ T8873] IPVS: ftp: loaded support on port[0] = 21 [ 193.529705][ T8866] device hsr_slave_0 entered promiscuous mode 12:18:38 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) [ 193.676314][ T8866] device hsr_slave_1 entered promiscuous mode [ 193.726053][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.733170][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.757460][ T8870] device bridge_slave_0 entered promiscuous mode [ 193.779523][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.795764][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.803687][ T8870] device bridge_slave_1 entered promiscuous mode [ 193.860445][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.910521][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.949862][ T8875] IPVS: ftp: loaded support on port[0] = 21 12:18:38 executing program 5: add_key(&(0x7f0000000280)='id_legacy\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 193.987197][ T8877] IPVS: ftp: loaded support on port[0] = 21 [ 194.026008][ T8870] team0: Port device team_slave_0 added [ 194.063082][ T8866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.151266][ T8870] team0: Port device team_slave_1 added [ 194.173342][ T8866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.263088][ T8866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.310440][ T8866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.383806][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 194.384283][ T8880] IPVS: ftp: loaded support on port[0] = 21 [ 194.508873][ T8870] device hsr_slave_0 entered promiscuous mode [ 194.546065][ T8870] device hsr_slave_1 entered promiscuous mode [ 194.605960][ T8870] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.702759][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 194.722874][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.731114][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.739177][ T8873] device bridge_slave_0 entered promiscuous mode [ 194.749829][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.757037][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.764788][ T8873] device bridge_slave_1 entered promiscuous mode [ 194.798846][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.811178][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.842040][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 194.860283][ T8873] team0: Port device team_slave_0 added [ 194.899062][ T8873] team0: Port device team_slave_1 added [ 194.910521][ T8870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.978399][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.985505][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.993427][ T8875] device bridge_slave_0 entered promiscuous mode [ 195.021984][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.029299][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.037470][ T8877] device bridge_slave_0 entered promiscuous mode [ 195.045002][ T8870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.099274][ T8870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.157919][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.165011][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.172920][ T8875] device bridge_slave_1 entered promiscuous mode [ 195.198600][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.206009][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.213887][ T8877] device bridge_slave_1 entered promiscuous mode [ 195.236997][ T8870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.380936][ T8873] device hsr_slave_0 entered promiscuous mode [ 195.436138][ T8873] device hsr_slave_1 entered promiscuous mode [ 195.495775][ T8873] debugfs: Directory 'hsr0' with parent '/' already present! [ 195.522597][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.533389][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.549087][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.565880][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.586548][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.637750][ T8877] team0: Port device team_slave_0 added [ 195.652076][ T8875] team0: Port device team_slave_0 added [ 195.662666][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.671118][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.697718][ T8877] team0: Port device team_slave_1 added [ 195.704765][ T8866] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.714813][ T8875] team0: Port device team_slave_1 added [ 195.721165][ T8873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.771389][ T8873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.909541][ T8877] device hsr_slave_0 entered promiscuous mode [ 195.945976][ T8877] device hsr_slave_1 entered promiscuous mode [ 195.985747][ T8877] debugfs: Directory 'hsr0' with parent '/' already present! [ 195.994077][ T8873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.038099][ T8880] chnl_net:caif_netlink_parms(): no params data found [ 196.068473][ T8873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.119022][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.128813][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.137997][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.145258][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.154418][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.230274][ T8875] device hsr_slave_0 entered promiscuous mode [ 196.276116][ T8875] device hsr_slave_1 entered promiscuous mode [ 196.335865][ T8875] debugfs: Directory 'hsr0' with parent '/' already present! [ 196.369106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.379544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.388038][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.395069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.423383][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.431377][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.439419][ T8880] device bridge_slave_0 entered promiscuous mode [ 196.453348][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.460886][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.472274][ T8880] device bridge_slave_1 entered promiscuous mode [ 196.510298][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.522168][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.553741][ T8877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.598581][ T8877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.652440][ T8877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.708789][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.717640][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.726358][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.734889][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.745284][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.755366][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.768276][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.779802][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.788293][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.797484][ T8875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.847783][ T8875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.902738][ T8877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.942309][ T8866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.953649][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.971640][ T8875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.037232][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.049358][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.073807][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.081731][ T8875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.132670][ T8880] team0: Port device team_slave_0 added [ 197.142594][ T8880] team0: Port device team_slave_1 added [ 197.177685][ T8870] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.187057][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.194833][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.235029][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.242948][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.253610][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.278895][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.349210][ T8880] device hsr_slave_0 entered promiscuous mode [ 197.386064][ T8880] device hsr_slave_1 entered promiscuous mode [ 197.425751][ T8880] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.484793][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.494636][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.506834][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.513877][ T8883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.523435][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.532586][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.541231][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.548353][ T8883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.556178][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.563841][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.580524][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.603870][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.612529][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.708072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.720473][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.730088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.739157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.748464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.757492][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.764565][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.772728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.781836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.791738][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.798873][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.807264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.816462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.825314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.833756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.847060][ T8880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.898465][ T8880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.949891][ T8880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.013084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.026742][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.053364][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.065528][ T8880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.154464][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.177326][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.185841][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.195130][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.203899][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.220525][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.239150][ T8870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.254625][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.289306][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.297303][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.308453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.317100][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.325526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.335012][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.349883][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.377321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.387912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.397886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.406850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.426355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.435161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.444062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.451223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.459763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.469291][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.478476][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.485644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.505382][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:18:43 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES32, @ANYPTR, @ANYBLOB="5d3453f301d2d6a2d0e7d2c8f67fbd2e5227feda4456e9a017056a52fd4919c7aeff72901879a424f2da5d8bb421c33e0b87af23ee8e1d6a9facaed79531371b182e22f1699dbbcfa2f573c0e79871be9f65e2118140daf6edc73312c55f914b403060177496e3c7010058f5a2020000004ebe9dc8cb1ccc52368318e34d3f3d4590ffc289ec7f4b78a6a5d175c3630ea8ef3a", @ANYRES64, @ANYRES16, @ANYRES32]], @ANYRES64], 0xfffffd62) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17) splice(r0, 0x0, r2, 0x0, 0x100000000000a, 0x0) [ 198.531802][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.550495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.559131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.570443][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.579153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.586824][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.595410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.606519][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.623074][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.662642][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.663294][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.663737][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.664097][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.664358][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.664392][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.664659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.665181][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.666352][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.666771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.667033][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.667058][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.696880][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.697511][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.697905][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.700079][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.700168][ T3384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.725789][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.848893][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.858386][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.867919][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.876803][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.885985][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.894989][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.912353][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.929575][ T8877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.956193][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.963410][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.973589][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.012339][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.030053][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.072057][ T8875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.089732][ T8875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.106941][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.116417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.126370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.156125][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.173516][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.202212][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 12:18:43 executing program 1: [ 199.234616][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.269480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.294202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:18:44 executing program 1: [ 199.388053][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.405910][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 12:18:44 executing program 2: [ 199.436255][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.444700][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.451876][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state 12:18:44 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES32, @ANYPTR, @ANYBLOB="5d3453f301d2d6a2d0e7d2c8f67fbd2e5227feda4456e9a017056a52fd4919c7aeff72901879a424f2da5d8bb421c33e0b87af23ee8e1d6a9facaed79531371b182e22f1699dbbcfa2f573c0e79871be9f65e2118140daf6edc73312c55f914b403060177496e3c7010058f5a2020000004ebe9dc8cb1ccc52368318e34d3f3d4590ffc289ec7f4b78a6a5d175c3630ea8ef3a", @ANYRES64, @ANYRES16, @ANYRES32]], @ANYRES64], 0xfffffd62) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17) splice(r0, 0x0, r2, 0x0, 0x100000000000a, 0x0) 12:18:44 executing program 1: [ 199.501415][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.525364][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 12:18:44 executing program 2: [ 199.556109][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.563241][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.592109][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:18:44 executing program 1: [ 199.616170][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.666799][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.700104][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 12:18:44 executing program 2: [ 199.742264][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.843638][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.896280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.911570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.929460][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.954607][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.963519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.978594][ T8880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.998083][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.007800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.026569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.042390][ T8936] input: syz1 as /devices/virtual/input/input5 [ 200.043779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.120197][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.139519][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.157904][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.240851][ T8934] input: syz1 as /devices/virtual/input/input6 12:18:45 executing program 3: 12:18:45 executing program 4: 12:18:45 executing program 1: 12:18:45 executing program 2: 12:18:45 executing program 3: 12:18:45 executing program 0: 12:18:45 executing program 5: 12:18:45 executing program 3: 12:18:45 executing program 0: 12:18:45 executing program 1: 12:18:45 executing program 2: 12:18:45 executing program 4: 12:18:45 executing program 5: 12:18:46 executing program 0: 12:18:46 executing program 3: 12:18:46 executing program 2: 12:18:46 executing program 5: 12:18:46 executing program 1: 12:18:46 executing program 4: 12:18:46 executing program 3: 12:18:46 executing program 5: 12:18:46 executing program 4: 12:18:46 executing program 0: 12:18:46 executing program 2: 12:18:46 executing program 1: 12:18:46 executing program 3: 12:18:46 executing program 5: 12:18:46 executing program 4: 12:18:46 executing program 2: 12:18:46 executing program 1: 12:18:46 executing program 0: 12:18:46 executing program 3: 12:18:46 executing program 5: 12:18:46 executing program 4: 12:18:46 executing program 2: 12:18:46 executing program 1: 12:18:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="584653420000100000000000400010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000ecffff030000f1ffffff0d620000000000000d990000000000000d8a0000000100001000000000010000000000000331472521", 0x67}], 0x0, 0x0) 12:18:46 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000140)=@isdn, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/22}]}, 0x5}], 0x3ffffffffffffba, 0x40000021, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x3, 0x4) fcntl$getown(r4, 0x9) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = msgget$private(0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10, 0x100800) r6 = syz_open_dev$usbmon(0x0, 0x9, 0x20000) dup2(0xffffffffffffffff, r6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0) msgsnd(r5, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001480)=0xc) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setfsgid(r7) setresgid(0x0, 0x0, 0x0) setfsgid(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_buf(r8, 0x29, 0x23, &(0x7f0000000200)="90", 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0xfffc}, 0x1c) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="66c67a", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="0dbbdac513e2df2168dd427802b0a864e9de7c7038dae62d9d5eb605ba9600855a143d789b43af738845827d745a70501d3f", @ANYRES16, @ANYRESHEX=r9]]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x0, 0x1}}, 0x50) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x4) 12:18:47 executing program 5: 12:18:47 executing program 4: 12:18:47 executing program 2: 12:18:47 executing program 1: 12:18:47 executing program 2: 12:18:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 202.524545][ T9028] BUG: unable to handle page fault for address: fffff52002d80000 [ 202.532328][ T9028] #PF: supervisor read access in kernel mode [ 202.538313][ T9028] #PF: error_code(0x0000) - not-present page [ 202.544404][ T9028] PGD 21ffee067 P4D 21ffee067 PUD aa11c067 PMD 632ed067 PTE 0 [ 202.551886][ T9028] Oops: 0000 [#1] PREEMPT SMP KASAN [ 202.557090][ T9028] CPU: 1 PID: 9028 Comm: syz-executor.0 Not tainted 5.4.0-next-20191202-syzkaller #0 [ 202.559401][ T4096] kobject: 'loop5' (00000000927ceab3): kobject_uevent_env [ 202.566542][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.566563][ T9028] RIP: 0010:xfs_sb_read_verify+0xf0/0x540 [ 202.566575][ T9028] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 18 04 00 00 4d 8b ac 24 30 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a7 03 00 00 41 8b 75 00 bf 58 [ 202.566581][ T9028] RSP: 0018:ffffc90002de7918 EFLAGS: 00010a06 [ 202.566591][ T9028] RAX: dffffc0000000000 RBX: 1ffff920005bcf26 RCX: ffffc90001ea9000 [ 202.566599][ T9028] RDX: 1ffff92002d80000 RSI: ffffffff82a9a3cb RDI: ffff8880a2089a60 [ 202.566606][ T9028] RBP: ffffc90002de7af8 R08: ffff88805c1d2400 R09: ffffed1015ce7045 [ 202.566612][ T9028] R10: ffffed1015ce7044 R11: ffff8880ae738223 R12: ffff8880a2089940 [ 202.566619][ T9028] R13: ffffc90016c00000 R14: ffffc90002de7ad0 R15: ffff88805c25a000 [ 202.566628][ T9028] FS: 00007fafc2c2a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 202.566634][ T9028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.566641][ T9028] CR2: fffff52002d80000 CR3: 000000008d63c000 CR4: 00000000001406e0 [ 202.566650][ T9028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.566657][ T9028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.566661][ T9028] Call Trace: [ 202.566680][ T9028] ? blk_insert_cloned_request+0x530/0x530 [ 202.566692][ T9028] ? xfs_sb_write_verify+0x470/0x470 [ 202.566706][ T9028] ? __bio_add_page+0x550/0x550 [ 202.566717][ T9028] ? __kasan_check_read+0x11/0x20 [ 202.566729][ T9028] ? blk_finish_plug+0x8f/0xa2 [ 202.566746][ T9028] ? _xfs_buf_ioapply+0xa35/0x10f0 [ 202.566763][ T9028] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 202.566776][ T9028] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 202.566788][ T9028] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 202.566807][ T9028] xfs_buf_ioend+0x3f9/0xde0 [ 202.752043][ T9028] __xfs_buf_submit+0x391/0xe70 [ 202.756875][ T9028] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 202.762663][ T9028] xfs_buf_read_uncached+0x164/0x550 [ 202.767931][ T9028] xfs_readsb+0x2c6/0x530 [ 202.772364][ T9028] ? xfs_initialize_perag+0x560/0x560 [ 202.777730][ T9028] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 202.783516][ T9028] xfs_fc_fill_super+0x3e7/0x11c0 [ 202.788531][ T9028] get_tree_bdev+0x414/0x650 [ 202.793127][ T9028] ? xfs_mount_free+0x80/0x80 [ 202.797807][ T9028] xfs_fc_get_tree+0x1d/0x30 [ 202.802384][ T9028] vfs_get_tree+0x8e/0x300 [ 202.806787][ T9028] do_mount+0x135a/0x1b50 [ 202.811099][ T9028] ? copy_mount_string+0x40/0x40 [ 202.816025][ T9028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 202.822258][ T9028] ? copy_mount_options+0x2e8/0x3f0 [ 202.827444][ T9028] ksys_mount+0xdb/0x150 [ 202.831668][ T9028] __x64_sys_mount+0xbe/0x150 [ 202.836329][ T9028] do_syscall_64+0xfa/0x790 [ 202.840817][ T9028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.846700][ T9028] RIP: 0033:0x45d0ca [ 202.850579][ T9028] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 202.870159][ T9028] RSP: 002b:00007fafc2c29a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 202.878557][ T9028] RAX: ffffffffffffffda RBX: 00007fafc2c29b40 RCX: 000000000045d0ca [ 202.886517][ T9028] RDX: 00007fafc2c29ae0 RSI: 0000000020000140 RDI: 00007fafc2c29b00 [ 202.894466][ T9028] RBP: 0000000000000001 R08: 00007fafc2c29b40 R09: 00007fafc2c29ae0 [ 202.902418][ T9028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000005 [ 202.910383][ T9028] R13: 00000000004ca9b9 R14: 00000000004e3bb0 R15: 00000000ffffffff [ 202.918354][ T9028] Modules linked in: [ 202.922226][ T9028] CR2: fffff52002d80000 [ 202.926364][ T9028] ---[ end trace d506c0066ae51e49 ]--- [ 202.931824][ T9028] RIP: 0010:xfs_sb_read_verify+0xf0/0x540 [ 202.937522][ T9028] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 18 04 00 00 4d 8b ac 24 30 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a7 03 00 00 41 8b 75 00 bf 58 [ 202.957897][ T9028] RSP: 0018:ffffc90002de7918 EFLAGS: 00010a06 [ 202.963940][ T9028] RAX: dffffc0000000000 RBX: 1ffff920005bcf26 RCX: ffffc90001ea9000 [ 202.972508][ T9028] RDX: 1ffff92002d80000 RSI: ffffffff82a9a3cb RDI: ffff8880a2089a60 [ 202.980468][ T9028] RBP: ffffc90002de7af8 R08: ffff88805c1d2400 R09: ffffed1015ce7045 [ 202.988419][ T9028] R10: ffffed1015ce7044 R11: ffff8880ae738223 R12: ffff8880a2089940 [ 202.996371][ T9028] R13: ffffc90016c00000 R14: ffffc90002de7ad0 R15: ffff88805c25a000 [ 203.004324][ T9028] FS: 00007fafc2c2a700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 203.013231][ T9028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.019882][ T9028] CR2: fffff52002d80000 CR3: 000000008d63c000 CR4: 00000000001406e0 [ 203.027836][ T9028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.035786][ T9028] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.043734][ T9028] Kernel panic - not syncing: Fatal exception [ 203.051279][ T9028] Kernel Offset: disabled [ 203.055604][ T9028] Rebooting in 86400 seconds..