[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.594262][ T26] audit: type=1800 audit(1576114675.475:25): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.613950][ T26] audit: type=1800 audit(1576114675.475:26): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.635694][ T26] audit: type=1800 audit(1576114675.485:27): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. 2019/12/12 01:38:07 fuzzer started 2019/12/12 01:38:09 dialing manager at 10.128.0.26:42497 2019/12/12 01:38:09 syscalls: 2701 2019/12/12 01:38:09 code coverage: enabled 2019/12/12 01:38:09 comparison tracing: enabled 2019/12/12 01:38:09 extra coverage: enabled 2019/12/12 01:38:09 setuid sandbox: enabled 2019/12/12 01:38:09 namespace sandbox: enabled 2019/12/12 01:38:09 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 01:38:09 fault injection: enabled 2019/12/12 01:38:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 01:38:09 net packet injection: enabled 2019/12/12 01:38:09 net device setup: enabled 2019/12/12 01:38:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 01:38:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:40:19 executing program 0: 01:40:19 executing program 1: syzkaller login: [ 206.948924][ T8985] IPVS: ftp: loaded support on port[0] = 21 [ 207.044204][ T8987] IPVS: ftp: loaded support on port[0] = 21 01:40:20 executing program 2: [ 207.225725][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 207.295592][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 207.359295][ T8991] IPVS: ftp: loaded support on port[0] = 21 [ 207.362064][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.380497][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.388326][ T8985] device bridge_slave_0 entered promiscuous mode [ 207.431802][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.443729][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.453246][ T8985] device bridge_slave_1 entered promiscuous mode [ 207.469901][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.478310][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.492031][ T8987] device bridge_slave_0 entered promiscuous mode [ 207.502261][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.509349][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.519439][ T8987] device bridge_slave_1 entered promiscuous mode 01:40:20 executing program 3: [ 207.538834][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.606667][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.634367][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.674646][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.694814][ T8985] team0: Port device team_slave_0 added [ 207.723013][ T8985] team0: Port device team_slave_1 added [ 207.771316][ T8987] team0: Port device team_slave_0 added [ 207.809935][ T8987] team0: Port device team_slave_1 added 01:40:20 executing program 4: [ 207.895137][ T8985] device hsr_slave_0 entered promiscuous mode [ 207.950384][ T8985] device hsr_slave_1 entered promiscuous mode [ 208.007501][ T8994] IPVS: ftp: loaded support on port[0] = 21 [ 208.016955][ T8991] chnl_net:caif_netlink_parms(): no params data found 01:40:21 executing program 5: [ 208.102837][ T8987] device hsr_slave_0 entered promiscuous mode [ 208.141377][ T8987] device hsr_slave_1 entered promiscuous mode [ 208.191061][ T8987] debugfs: Directory 'hsr0' with parent '/' already present! [ 208.231077][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.238274][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.246402][ T8991] device bridge_slave_0 entered promiscuous mode [ 208.254675][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.261891][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.269749][ T8991] device bridge_slave_1 entered promiscuous mode [ 208.317050][ T8996] IPVS: ftp: loaded support on port[0] = 21 [ 208.317056][ T8998] IPVS: ftp: loaded support on port[0] = 21 [ 208.346550][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.383679][ T8985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.434545][ T8985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.493444][ T8985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.534032][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.576420][ T8985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.643177][ T8987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.694443][ T8987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.767200][ T8991] team0: Port device team_slave_0 added [ 208.776434][ T8991] team0: Port device team_slave_1 added [ 208.797935][ T8987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.855101][ T8987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.953414][ T8991] device hsr_slave_0 entered promiscuous mode [ 208.991756][ T8991] device hsr_slave_1 entered promiscuous mode [ 209.031070][ T8991] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.205105][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 209.235403][ T8994] chnl_net:caif_netlink_parms(): no params data found [ 209.246179][ T8991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.283817][ T8991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.372117][ T8991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.423004][ T8991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.516923][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 209.587321][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.595223][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.604367][ T8998] device bridge_slave_0 entered promiscuous mode [ 209.616155][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.623835][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.632310][ T8998] device bridge_slave_1 entered promiscuous mode [ 209.656456][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.663825][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.672115][ T8994] device bridge_slave_0 entered promiscuous mode [ 209.681661][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.688722][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.697219][ T8994] device bridge_slave_1 entered promiscuous mode [ 209.721480][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.728585][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.736499][ T8996] device bridge_slave_0 entered promiscuous mode [ 209.761704][ T8994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.776907][ T8994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.808346][ T8994] team0: Port device team_slave_0 added [ 209.816076][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.823332][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.831104][ T8996] device bridge_slave_1 entered promiscuous mode [ 209.839471][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.852497][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.863593][ T8994] team0: Port device team_slave_1 added [ 209.884659][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.963451][ T8994] device hsr_slave_0 entered promiscuous mode [ 210.010446][ T8994] device hsr_slave_1 entered promiscuous mode [ 210.060186][ T8994] debugfs: Directory 'hsr0' with parent '/' already present! [ 210.085524][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.105268][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.137077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.145680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.163584][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.180306][ T8998] team0: Port device team_slave_0 added [ 210.188701][ T8985] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.209838][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.221905][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.240423][ T8998] team0: Port device team_slave_1 added [ 210.249758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.258294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.266278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.274922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.283802][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.291207][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.299357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.308375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.316798][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.323990][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.331696][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.348022][ T8994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.419409][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.427681][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.436332][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.444884][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.451999][ T9002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.461107][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.469601][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.478329][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.486746][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.493836][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.504232][ T8996] team0: Port device team_slave_0 added [ 210.513415][ T8994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.573253][ T8994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.622001][ T8994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.682280][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.691985][ T8996] team0: Port device team_slave_1 added [ 210.763378][ T8998] device hsr_slave_0 entered promiscuous mode [ 210.800776][ T8998] device hsr_slave_1 entered promiscuous mode [ 210.840337][ T8998] debugfs: Directory 'hsr0' with parent '/' already present! [ 210.852414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.860586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.868291][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.877277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.887334][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.910081][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.919173][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.930844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.939294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.948613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.957014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.965628][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.974712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.983381][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.991785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.999935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.008735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.023903][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.041737][ T8987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.065466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.073602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.082233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.144020][ T8996] device hsr_slave_0 entered promiscuous mode [ 211.200581][ T8996] device hsr_slave_1 entered promiscuous mode [ 211.241101][ T8996] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.262987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.272103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.281103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.288151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.295893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.304951][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.313448][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.320525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.328200][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.338081][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.347313][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.384729][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.422147][ T8998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.462458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.471070][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.493572][ T8996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.552654][ T8996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.588341][ T8998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.656399][ T8998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.713379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.722518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.731464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.739883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.750214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.760660][ T8996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.810089][ T8998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.882935][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.892474][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.907950][ T8996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.983503][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.991452][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.998829][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.007487][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.020865][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.036154][ T8994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.049937][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.073639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.083574][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.117374][ T8985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.139326][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.164113][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.177656][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.198281][ T8994] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.219572][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.228103][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.253324][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.304097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.320403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 01:40:25 executing program 0: [ 212.349309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.356465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 01:40:25 executing program 1: 01:40:25 executing program 2: [ 212.435177][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.460660][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.488164][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.514981][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.522159][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state 01:40:25 executing program 0: 01:40:25 executing program 2: 01:40:25 executing program 1: [ 212.555724][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.567924][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.579512][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.653420][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 01:40:25 executing program 2: 01:40:25 executing program 0: [ 212.698140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.714723][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.757677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 01:40:25 executing program 1: [ 212.858595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.878664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.930920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.939534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.954883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.987856][ T8994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.999657][ T8994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.022382][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.030770][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.039377][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.047963][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.055075][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.063676][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.072156][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.080519][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.089052][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.098640][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.105743][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.114096][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.140141][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.148932][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.160060][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.167821][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.188373][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.199327][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.209092][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.218164][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.236823][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.249663][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.259914][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.280660][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.289311][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.298833][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.307876][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.316932][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.324061][ T9002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.332311][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.341325][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.351634][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.359926][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.369789][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.387113][ T8996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.395233][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.410744][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 01:40:26 executing program 3: [ 213.435309][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.442483][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.460303][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.469005][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.517221][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.528000][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.554186][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.577671][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.599470][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.609343][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.620971][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.638879][ T8998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.651830][ T8998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.668184][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.677118][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.686399][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.695011][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.704759][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.715233][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.740208][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.747786][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.759910][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0 01:40:26 executing program 4: 01:40:26 executing program 2: 01:40:26 executing program 0: 01:40:26 executing program 1: 01:40:26 executing program 3: 01:40:26 executing program 5: 01:40:26 executing program 3: 01:40:27 executing program 2: 01:40:27 executing program 0: 01:40:27 executing program 5: 01:40:27 executing program 1: 01:40:27 executing program 3: 01:40:27 executing program 4: 01:40:27 executing program 5: 01:40:27 executing program 1: 01:40:27 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=0x7ffd, 0x12) 01:40:27 executing program 0: 01:40:27 executing program 4: 01:40:27 executing program 5: 01:40:27 executing program 1: 01:40:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={[{@fat=@flush='flush'}]}) 01:40:27 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:40:27 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 01:40:27 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) dup(0xffffffffffffffff) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:27 executing program 1: r0 = mq_open(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x0, 0x1}) 01:40:27 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) [ 214.839906][ T9106] FAT-fs (loop4): bogus number of reserved sectors 01:40:27 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_procfs(r4, &(0x7f0000000940)='net/sockstat6\x00\xcf\xb7Pg\xdb\x88j\x17\xad\x9f\xd9#\x01\xddWs\xfdF#]\xf9\x97\xad\xa6%./B\xb3E\x05V\x97\xebZQ_\xc4\x06]N\x11\xbeyu_\xc4\xedx]V\"\x06\xcd\x8f\xca\xbb \xc7o1\t5dl\xb0\xcaE\xb8\xceS;\\\xe2Lt\x9e\",\xdc\xbe$\x1e3:I_\v\x8d\xdas\x9e\x1bA\tC\xc5\xdf\xdb\xb8\xf2\x84\xf9$t\xf8}HX\x8b=7\x18\xce') r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r5, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0xc995c76cdda916eb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x485, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x601ca79bbf5ddeaf) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001240)={0x4, 0x70, 0x0, 0x80, 0x3f, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x9800, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000640)='[\b)\xb4\"\x16p#\x00', 0x0, 0x2) socket(0x12, 0x1a6273f2b2e289f7, 0x0) socket(0x1, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x578b73438318286d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000000e0f}, 0x0, 0xf7fffff7ffffffff, r7, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x8) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) 01:40:27 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) [ 214.964581][ T9106] FAT-fs (loop4): Can't find a valid FAT filesystem 01:40:28 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) [ 215.102831][ T9106] FAT-fs (loop4): bogus number of reserved sectors [ 215.110581][ T9106] FAT-fs (loop4): Can't find a valid FAT filesystem 01:40:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) dup(0xffffffffffffffff) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 4: open(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x10000000000000e0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2002) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 01:40:28 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 01:40:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 215.568214][ C0] hrtimer: interrupt took 52599 ns [ 215.741080][ T9162] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.886705][ T9161] list_del corruption. prev->next should be ffff888096eb9250, but was ffff8882199e37d0 [ 215.897256][ T9161] ------------[ cut here ]------------ [ 215.902725][ T9161] kernel BUG at lib/list_debug.c:51! [ 215.908271][ T9161] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 215.914352][ T9161] CPU: 1 PID: 9161 Comm: syz-executor.1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 215.924145][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 01:40:28 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) 01:40:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfffffeee) 01:40:28 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) 01:40:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) 01:40:28 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 215.934214][ T9161] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 215.940543][ T9161] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 215.960599][ T9161] RSP: 0018:ffffc900016b7c00 EFLAGS: 00010282 [ 215.966666][ T9161] RAX: 0000000000000054 RBX: ffff8882199e0000 RCX: 0000000000000000 [ 215.974639][ T9161] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520002d6f72 [ 215.982615][ T9161] RBP: ffffc900016b7c18 R08: 0000000000000054 R09: ffffed1015d26621 [ 215.990580][ T9161] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8882199e0100 [ 215.998548][ T9161] R13: ffff8882199e37d0 R14: ffff888096eb9250 R15: ffff888096eb9250 [ 216.006503][ T9161] FS: 0000000001a90940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 216.015418][ T9161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.021987][ T9161] CR2: 00007f58dec63000 CR3: 000000008a909000 CR4: 00000000001426e0 [ 216.029946][ T9161] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.037905][ T9161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.045854][ T9161] Call Trace: [ 216.049153][ T9161] __dentry_kill+0x1fd/0x600 [ 216.053722][ T9161] ? dput+0x38/0xe10 [ 216.057596][ T9161] ? dput+0x38/0xe10 [ 216.061476][ T9161] dput+0x62f/0xe10 [ 216.065308][ T9161] simple_recursive_removal+0x5bc/0x6d0 [ 216.070881][ T9161] ? debugfs_rename+0x7f0/0x7f0 [ 216.075720][ T9161] debugfs_remove+0x5e/0x80 [ 216.080201][ T9161] kvm_put_kvm+0x136/0xcc0 [ 216.084592][ T9161] ? kvm_irqfd_release+0xe2/0x120 [ 216.089606][ T9161] ? kvm_irqfd_release+0xe2/0x120 [ 216.094607][ T9161] kvm_vm_release+0x44/0x60 [ 216.099089][ T9161] __fput+0x2ff/0x890 [ 216.103049][ T9161] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 216.107971][ T9161] ____fput+0x16/0x20 [ 216.111945][ T9161] task_work_run+0x145/0x1c0 [ 216.116516][ T9161] exit_to_usermode_loop+0x316/0x380 [ 216.121792][ T9161] do_syscall_64+0x676/0x790 [ 216.126362][ T9161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.132230][ T9161] RIP: 0033:0x4144a1 [ 216.136106][ T9161] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 216.155704][ T9161] RSP: 002b:00007ffcca309de0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 216.164095][ T9161] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00000000004144a1 [ 216.172048][ T9161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 216.180006][ T9161] RBP: 0000000000000001 R08: 00000000f367f7d4 R09: ffffffffffffffff [ 216.187955][ T9161] R10: 00007ffcca309ec0 R11: 0000000000000293 R12: 000000000075c9a0 [ 216.195907][ T9161] R13: 000000000075c9a0 R14: 0000000000760540 R15: 000000000075bfd4 [ 216.203873][ T9161] Modules linked in: [ 216.207837][ T9161] ---[ end trace db1db3e3a67a6b1b ]--- [ 216.213348][ T9161] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 216.219685][ T9161] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 216.239314][ T9161] RSP: 0018:ffffc900016b7c00 EFLAGS: 00010282 [ 216.245392][ T9161] RAX: 0000000000000054 RBX: ffff8882199e0000 RCX: 0000000000000000 [ 216.253384][ T9161] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520002d6f72 [ 216.261396][ T9161] RBP: ffffc900016b7c18 R08: 0000000000000054 R09: ffffed1015d26621 [ 216.269367][ T9161] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8882199e0100 [ 216.277370][ T9161] R13: ffff8882199e37d0 R14: ffff888096eb9250 R15: ffff888096eb9250 [ 216.285363][ T9161] FS: 0000000001a90940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 216.294306][ T9161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.300925][ T9161] CR2: 00007f58dec63000 CR3: 000000008a909000 CR4: 00000000001426e0 [ 216.308897][ T9161] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.316907][ T9161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.324904][ T9161] Kernel panic - not syncing: Fatal exception [ 216.332291][ T9161] Kernel Offset: disabled [ 216.336613][ T9161] Rebooting in 86400 seconds..