[ 71.345470][ T26] audit: type=1800 audit(1565590823.377:27): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 71.384000][ T26] audit: type=1800 audit(1565590823.387:28): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.374796][ T26] audit: type=1800 audit(1565590824.467:29): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 72.395366][ T26] audit: type=1800 audit(1565590824.467:30): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/08/12 06:20:33 fuzzer started 2019/08/12 06:20:36 dialing manager at 10.128.0.26:43421 2019/08/12 06:20:36 syscalls: 2487 2019/08/12 06:20:36 code coverage: enabled 2019/08/12 06:20:36 comparison tracing: enabled 2019/08/12 06:20:36 extra coverage: extra coverage is not supported by the kernel 2019/08/12 06:20:36 setuid sandbox: enabled 2019/08/12 06:20:36 namespace sandbox: enabled 2019/08/12 06:20:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/12 06:20:36 fault injection: enabled 2019/08/12 06:20:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/12 06:20:36 net packet injection: enabled 2019/08/12 06:20:36 net device setup: enabled 06:22:20 executing program 0: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) r1 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000001400)={{0x0, 0x0, 0x5b197c02, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x1, r1, 0x2, 0xada2, 'syz0\x00', &(0x7f00000000c0)=['/dev/nullb0\x00', '\x00'], 0xd, [], [0x0, 0x0, 0x855, 0x3]}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req={0xf02dcf7, 0x50000, 0x9}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000002c0)) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000300)=0x18a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x100000000000002a, 0x0) 06:22:21 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x380, 0x120, 0x0, 0x274, 0x0, 0x274, 0x368, 0x368, 0x368, 0x368, 0x368, 0x4, 0x0, {[{{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'sit0\x00'}, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'tunl0\x00', 'ipddp0\x00'}, 0x0, 0x98, 0x104}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2a69ff5328c5ed1275322cd90249861048d8d5268b3aab016ceb171936e9159c2c4c162820a7ebc809ddaef99e25b2748e7260ec341b623956a78dd687c494f5"}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'erspan0\x00', 'gre0\x00'}, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="41b36d7ea6f6"}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3dc) syzkaller login: [ 188.992689][T10284] IPVS: ftp: loaded support on port[0] = 21 [ 189.103418][T10284] chnl_net:caif_netlink_parms(): no params data found [ 189.126558][T10287] IPVS: ftp: loaded support on port[0] = 21 06:22:21 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000440)=0x8) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000c000000009a00000000000022000000306457313edec18136cf58091727294f4508113904f2000000000000000000000000000000000000000000000000f49739e8fb0ca3df00"], &(0x7f0000000080)=0x46) clone(0x1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 189.169231][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.177376][T10284] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.185464][T10284] device bridge_slave_0 entered promiscuous mode [ 189.195128][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.202994][T10284] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.211032][T10284] device bridge_slave_1 entered promiscuous mode [ 189.242850][T10284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.273184][T10284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.310573][T10284] team0: Port device team_slave_0 added [ 189.317631][T10284] team0: Port device team_slave_1 added 06:22:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 189.454121][T10284] device hsr_slave_0 entered promiscuous mode [ 189.511815][T10284] device hsr_slave_1 entered promiscuous mode [ 189.585407][T10290] IPVS: ftp: loaded support on port[0] = 21 [ 189.604404][T10292] IPVS: ftp: loaded support on port[0] = 21 [ 189.618170][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.625298][T10284] bridge0: port 2(bridge_slave_1) entered forwarding state 06:22:21 executing program 4: syz_open_dev$media(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x0, 0x0, &(0x7f00001c9fff), 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) [ 189.632680][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.639756][T10284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.685914][T10287] chnl_net:caif_netlink_parms(): no params data found [ 189.847902][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.855229][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.863746][T10287] device bridge_slave_0 entered promiscuous mode [ 189.872301][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.879370][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.887375][T10287] device bridge_slave_1 entered promiscuous mode 06:22:22 executing program 5: r0 = syz_open_dev$media(0x0, 0x6b, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x208040, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x200000000000011, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$tipc(0x0) socket$kcm(0xa, 0x922000000003, 0x11) [ 189.928319][T10292] chnl_net:caif_netlink_parms(): no params data found [ 189.981136][T10295] IPVS: ftp: loaded support on port[0] = 21 [ 189.988576][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.037950][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.061413][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.073143][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.081018][T10292] device bridge_slave_0 entered promiscuous mode [ 190.092162][T10290] chnl_net:caif_netlink_parms(): no params data found [ 190.110647][T10287] team0: Port device team_slave_0 added [ 190.120685][ T23] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.129768][ T23] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.139775][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.146921][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.154763][T10292] device bridge_slave_1 entered promiscuous mode [ 190.180019][T10284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.188130][T10287] team0: Port device team_slave_1 added [ 190.228033][T10300] IPVS: ftp: loaded support on port[0] = 21 [ 190.239806][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.293819][T10287] device hsr_slave_0 entered promiscuous mode [ 190.351907][T10287] device hsr_slave_1 entered promiscuous mode [ 190.401592][T10287] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.416928][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.424069][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.431845][T10290] device bridge_slave_0 entered promiscuous mode [ 190.439912][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.447047][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.454648][T10290] device bridge_slave_1 entered promiscuous mode [ 190.462562][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.486905][T10292] team0: Port device team_slave_0 added [ 190.494673][T10292] team0: Port device team_slave_1 added [ 190.538663][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.549488][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.560761][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.568989][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.633737][T10292] device hsr_slave_0 entered promiscuous mode [ 190.671940][T10292] device hsr_slave_1 entered promiscuous mode [ 190.711649][T10292] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.732842][T10284] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.756073][T10290] team0: Port device team_slave_0 added [ 190.763256][T10290] team0: Port device team_slave_1 added [ 190.769960][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.779308][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.787815][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.795002][T10288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.803465][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.812064][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.820893][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.827997][T10288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.913410][T10290] device hsr_slave_0 entered promiscuous mode [ 190.951814][T10290] device hsr_slave_1 entered promiscuous mode [ 190.991636][T10290] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.039401][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.047915][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.104396][T10295] chnl_net:caif_netlink_parms(): no params data found [ 191.155766][T10300] chnl_net:caif_netlink_parms(): no params data found [ 191.180485][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.188522][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.198593][T10295] device bridge_slave_0 entered promiscuous mode [ 191.206273][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.214825][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.223440][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.247730][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.255074][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.263169][T10295] device bridge_slave_1 entered promiscuous mode [ 191.276065][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.284848][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.319760][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.327428][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.335169][T10300] device bridge_slave_0 entered promiscuous mode [ 191.343177][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.350239][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.358261][T10300] device bridge_slave_1 entered promiscuous mode [ 191.373540][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.382228][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.393008][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.403130][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.411771][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.429412][T10284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.440803][T10284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.450376][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.463435][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.487559][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.499399][T10292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.507882][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.516536][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.535856][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.544008][T10300] team0: Port device team_slave_0 added [ 191.558990][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.566862][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.574603][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.583655][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.591401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.600159][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.608863][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.615976][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.624540][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.634077][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.647248][T10300] team0: Port device team_slave_1 added [ 191.669073][T10295] team0: Port device team_slave_0 added [ 191.681080][T10295] team0: Port device team_slave_1 added [ 191.694843][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.704992][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.713475][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.720518][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.728265][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.737011][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.745380][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.752459][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.760005][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.768695][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.776952][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.784113][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.791754][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.799329][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.807097][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.884186][T10300] device hsr_slave_0 entered promiscuous mode [ 191.931769][T10300] device hsr_slave_1 entered promiscuous mode [ 191.991762][T10300] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.003151][T10284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.030661][T10292] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.042545][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.051239][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.060276][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.071778][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.080392][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.144096][T10295] device hsr_slave_0 entered promiscuous mode [ 192.182030][T10295] device hsr_slave_1 entered promiscuous mode [ 192.221728][T10295] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.237500][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.245419][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.254981][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.264260][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.271318][T10299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.279063][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.287646][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.296011][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.303164][T10299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.311077][T10299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.321709][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.330316][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.339450][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.361692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.370309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.378978][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.387840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.396672][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.406413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.414650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.423145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.431226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.439529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.461185][T10290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.472010][T10290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.495036][T10292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.507006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.515203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.523799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.532543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.540983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.549355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.557917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.566351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.574704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.583207][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.591393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.599814][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.607762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.620339][T10287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.632217][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.672304][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.679506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.688304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.718087][T10292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.758589][ C0] hrtimer: interrupt took 24842 ns [ 192.795599][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.823169][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.835011][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.846013][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.854896][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.865045][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.887852][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.913343][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.921097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:22:25 executing program 0: [ 192.992488][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.001179][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 06:22:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 193.042732][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.049807][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.100912][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.134831][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.159784][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.165908][T10337] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 193.166914][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.187586][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.196345][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:22:25 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="600300000c035231a6c0301dcaaddf250500000a0800", @ANYBLOB="740081008ca31de4d43b54c91df8a31be46a014d8ae8f40fc22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b9d0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1678c06eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000080), 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 193.207665][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.214798][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.226300][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.235132][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.244733][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.251940][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state 06:22:25 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000440)=0x8) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000c000000009a00000000000022000000306457313edec18136cf58091727294f4508113904f2000000000000000000000000000000000000000000000000f49739e8fb0ca3df00"], &(0x7f0000000080)=0x46) clone(0x1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 193.286482][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.318272][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.367646][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.399832][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.440318][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.449562][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.458183][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.467663][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.480581][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.494781][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.504665][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.526688][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.538710][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.549140][T10304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.567325][T10295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.582526][T10295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 06:22:25 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="600300000c035231a6c0301dcaaddf250500000a0800", @ANYBLOB="740081008ca31de4d43b54c91df8a31be46a014d8ae8f40fc22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b9d0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1678c06eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x3f, 0x0, 0x0) [ 193.606754][T10300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.618089][T10300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.638062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.647417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.699668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.756376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.801388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.836745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.870821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.895657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.911092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.919818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.950404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.974315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.988396][T10341] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 193.999663][T10341] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.020012][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.109269][T10341] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 194.143963][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.147287][T10341] EXT4-fs: failed to create workqueue [ 194.169703][T10341] EXT4-fs (loop0): mount failed 06:22:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x2068, 0x0) 06:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x801, 0x44) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4a, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000208010007000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:22:26 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 194.429920][T10357] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 194.440415][T10357] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.453411][T10357] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 194.576726][T10357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 194.698637][T10379] FAT-fs (loop3): Directory bread(block 7) failed [ 194.759400][T10379] FAT-fs (loop3): Directory bread(block 8) failed [ 194.821333][T10379] FAT-fs (loop3): Directory bread(block 9) failed [ 194.838148][T10379] FAT-fs (loop3): Directory bread(block 10) failed [ 194.846079][T10379] FAT-fs (loop3): Directory bread(block 11) failed 06:22:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x3}}) mremap(&(0x7f0000fd6000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000aa8000/0x2000)=nil) r1 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:22:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)) 06:22:27 executing program 5: r0 = syz_open_dev$media(0x0, 0x6b, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x208040, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x200000000000011, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$tipc(0x0) socket$kcm(0xa, 0x922000000003, 0x11) 06:22:27 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x2c}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5dbc1b227d10d8ea", @ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d0fef515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae", @ANYRESHEX], 0x0, 0x120}, 0x20) tkill(r0, 0x11) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 194.876078][T10379] FAT-fs (loop3): Directory bread(block 12) failed [ 194.886035][T10379] FAT-fs (loop3): Directory bread(block 13) failed [ 194.911001][T10379] FAT-fs (loop3): Directory bread(block 14) failed [ 194.966061][T10423] ptrace attach of "/root/syz-executor.2"[10422] was attempted by "/root/syz-executor.2"[10423] [ 194.977057][T10379] FAT-fs (loop3): Directory bread(block 15) failed [ 195.004817][T10379] FAT-fs (loop3): Directory bread(block 16) failed 06:22:27 executing program 5: r0 = syz_open_dev$media(0x0, 0x6b, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x208040, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x200000000000011, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$tipc(0x0) socket$kcm(0xa, 0x922000000003, 0x11) 06:22:27 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x69) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x2}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}}, 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) 06:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x801, 0x44) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4a, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000208010007000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:22:27 executing program 1: r0 = syz_open_dev$media(0x0, 0x6b, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x208040, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x200000000000011, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$tipc(0x0) socket$kcm(0xa, 0x922000000003, 0x11) 06:22:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000022d000/0x4000)=nil, 0x4000, 0x0, 0x100132, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) 06:22:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x801, 0x44) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4a, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010007000270f7f8", 0xfdef}], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 06:22:27 executing program 1: r0 = syz_open_dev$media(0x0, 0x6b, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x208040, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x6) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x200000000000011, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, 0x0, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x80) syz_genetlink_get_family_id$tipc(0x0) socket$kcm(0xa, 0x922000000003, 0x11) [ 196.097803][ T26] audit: type=1804 audit(1565590948.187:31): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir589979442/syzkaller.2EeZVp/4/file0/file0" dev="sda1" ino=16556 res=1 06:22:29 executing program 0: r0 = getpid() r1 = gettid() kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 06:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x801, 0x44) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000140)) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xf4a, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000208010007000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:22:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={[{@unhide='unhide'}], [{@appraise='appraise'}]}) 06:22:29 executing program 5: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000004c0)=0x132, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x24000, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) pipe(&(0x7f00000001c0)) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [{0x0, 0x3}, {0x80000000, 0x4d}]}, 0x18, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x400000000000000, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sync() socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) 06:22:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) syncfs(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x102000002) 06:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) 06:22:29 executing program 2: syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@usrquota='usrquota'}, {@gid={'gid'}}, {@errors_remount='errors=remount-ro'}]}) [ 197.636354][T10489] FAT-fs (loop3): Directory bread(block 7) failed 06:22:29 executing program 0: [ 197.733015][T10489] FAT-fs (loop3): Directory bread(block 8) failed [ 197.749895][T10489] FAT-fs (loop3): Directory bread(block 9) failed [ 197.758055][T10489] FAT-fs (loop3): Directory bread(block 10) failed [ 197.774492][T10284] WARNING: CPU: 1 PID: 10284 at fs/block_dev.c:1899 __blkdev_put+0x6ba/0x810 [ 197.783272][T10284] Kernel panic - not syncing: panic_on_warn set ... [ 197.787525][ T3879] kobject: 'loop0' (000000008c82667a): kobject_uevent_env [ 197.789867][T10284] CPU: 1 PID: 10284 Comm: syz-executor.0 Not tainted 5.3.0-rc3-next-20190809 #63 [ 197.806100][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.816154][T10284] Call Trace: [ 197.819448][T10284] dump_stack+0x172/0x1f0 [ 197.823782][T10284] ? __blkdev_put+0x5d0/0x810 [ 197.828460][T10284] panic+0x2dc/0x755 [ 197.832825][T10284] ? add_taint.cold+0x16/0x16 [ 197.837534][T10284] ? __kasan_check_write+0x14/0x20 [ 197.840617][T10489] FAT-fs (loop3): Directory bread(block 11) failed [ 197.842640][T10284] ? __warn.cold+0x5/0x4c [ 197.842653][T10284] ? __warn+0xe7/0x1e0 [ 197.842667][T10284] ? __blkdev_put+0x6ba/0x810 [ 197.842680][T10284] __warn.cold+0x20/0x4c [ 197.842693][T10284] ? __blkdev_put+0x6ba/0x810 [ 197.842714][T10284] report_bug+0x263/0x2b0 [ 197.861630][ T3879] kobject: 'loop0' (000000008c82667a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 197.862538][T10284] do_error_trap+0x11b/0x200 [ 197.874402][T10489] FAT-fs (loop3): Directory bread(block 12) failed [ 197.875724][T10284] do_invalid_op+0x37/0x50 [ 197.875746][T10284] ? __blkdev_put+0x6ba/0x810 [ 197.906102][T10284] invalid_op+0x23/0x30 [ 197.910262][T10284] RIP: 0010:__blkdev_put+0x6ba/0x810 [ 197.914436][T10489] FAT-fs (loop3): Directory bread(block 13) failed [ 197.915545][T10284] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 84 24 fd ff ff 48 8b bd 50 ff ff ff e8 90 5d e6 ff e9 13 fd ff ff e8 46 6f ab ff <0f> 0b e9 dc fa ff ff 48 89 cf e8 57 5d e6 ff e9 6a fa ff ff 48 8b [ 197.915553][T10284] RSP: 0018:ffff88809162fc90 EFLAGS: 00010293 [ 197.915565][T10284] RAX: ffff88808e0d0500 RBX: ffff8880a6a2e740 RCX: ffffffff81c6a4c4 [ 197.915573][T10284] RDX: 0000000000000000 RSI: ffffffff81c6a9ea RDI: 0000000000000005 [ 197.915581][T10284] RBP: ffff88809162fd88 R08: ffff88808e0d0500 R09: ffffed1014d45cec [ 197.915600][T10284] R10: ffff88809162fc80 R11: ffff8880a6a2e75f R12: 0000000000000002 [ 197.922393][T10489] FAT-fs (loop3): Directory bread(block 14) failed [ 197.941708][T10284] R13: dffffc0000000000 R14: ffff8880a6a2e758 R15: ffff8880a6a2e758 [ 197.941736][T10284] ? __blkdev_put+0x194/0x810 [ 197.941745][T10284] ? __blkdev_put+0x6ba/0x810 [ 197.941763][T10284] ? bd_set_size+0xb0/0xb0 [ 197.941776][T10284] ? wait_for_completion+0x440/0x440 [ 197.941794][T10284] blkdev_put+0x98/0x560 [ 197.941809][T10284] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 197.941826][T10284] blkdev_close+0x8b/0xb0 [ 197.941852][T10284] __fput+0x2ff/0x890 [ 197.948278][T10489] FAT-fs (loop3): Directory bread(block 15) failed [ 197.955889][T10284] ? blkdev_put+0x560/0x560 [ 197.955904][T10284] ____fput+0x16/0x20 [ 197.955918][T10284] task_work_run+0x145/0x1c0 [ 197.955937][T10284] exit_to_usermode_loop+0x316/0x380 [ 197.955953][T10284] do_syscall_64+0x65f/0x760 [ 197.955973][T10284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.955991][T10284] RIP: 0033:0x4134f0 [ 197.964988][T10489] FAT-fs (loop3): Directory bread(block 16) failed [ 197.971931][T10284] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 197.971938][T10284] RSP: 002b:00007fff05f792e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 197.971949][T10284] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004134f0 [ 197.971955][T10284] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 197.971962][T10284] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a [ 197.971970][T10284] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 197.971977][T10284] R13: 00007fff05f79320 R14: 00000000000303dd R15: 00007fff05f79330 [ 197.981093][T10284] Kernel Offset: disabled [ 198.154590][T10284] Rebooting in 86400 seconds..