[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   61.340994][   T26] audit: type=1800 audit(1576116719.508:25): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   61.361791][   T26] audit: type=1800 audit(1576116719.508:26): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   61.415596][   T26] audit: type=1800 audit(1576116719.518:27): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts.
2019/12/12 02:12:12 fuzzer started
2019/12/12 02:12:13 dialing manager at 10.128.0.26:42497
2019/12/12 02:12:13 syscalls: 2701
2019/12/12 02:12:13 code coverage: enabled
2019/12/12 02:12:13 comparison tracing: enabled
2019/12/12 02:12:13 extra coverage: enabled
2019/12/12 02:12:13 setuid sandbox: enabled
2019/12/12 02:12:13 namespace sandbox: enabled
2019/12/12 02:12:13 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/12 02:12:13 fault injection: enabled
2019/12/12 02:12:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/12 02:12:13 net packet injection: enabled
2019/12/12 02:12:13 net device setup: enabled
2019/12/12 02:12:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/12 02:12:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
02:13:42 executing program 0:

02:13:42 executing program 1:

syzkaller login: [  164.778844][ T9068] IPVS: ftp: loaded support on port[0] = 21
02:13:43 executing program 2:

[  164.968994][ T9070] IPVS: ftp: loaded support on port[0] = 21
[  165.012577][ T9068] chnl_net:caif_netlink_parms(): no params data found
[  165.144530][ T9073] IPVS: ftp: loaded support on port[0] = 21
[  165.176280][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.184835][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.195047][ T9068] device bridge_slave_0 entered promiscuous mode
[  165.234124][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.256965][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.264915][ T9068] device bridge_slave_1 entered promiscuous mode
02:13:43 executing program 3:

[  165.352313][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.380551][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.407297][ T9070] chnl_net:caif_netlink_parms(): no params data found
[  165.460117][ T9068] team0: Port device team_slave_0 added
[  165.492019][ T9068] team0: Port device team_slave_1 added
[  165.564622][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.572352][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.595185][ T9070] device bridge_slave_0 entered promiscuous mode
02:13:43 executing program 4:

[  165.670273][ T9068] device hsr_slave_0 entered promiscuous mode
[  165.747767][ T9068] device hsr_slave_1 entered promiscuous mode
[  165.797315][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.804462][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.825362][ T9078] IPVS: ftp: loaded support on port[0] = 21
02:13:44 executing program 5:

[  165.848018][ T9070] device bridge_slave_1 entered promiscuous mode
[  165.911936][ T9073] chnl_net:caif_netlink_parms(): no params data found
[  165.918917][ T9080] IPVS: ftp: loaded support on port[0] = 21
[  165.962252][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.007680][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.087156][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.094360][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.103091][ T9073] device bridge_slave_0 entered promiscuous mode
[  166.113221][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.120661][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.128493][ T9073] device bridge_slave_1 entered promiscuous mode
[  166.142072][ T9068] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  166.206742][ T9082] IPVS: ftp: loaded support on port[0] = 21
[  166.231849][ T9068] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  166.272108][ T9070] team0: Port device team_slave_0 added
[  166.280526][ T9070] team0: Port device team_slave_1 added
[  166.294461][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.313959][ T9068] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  166.359878][ T9068] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  166.414407][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.500147][ T9070] device hsr_slave_0 entered promiscuous mode
[  166.558278][ T9070] device hsr_slave_1 entered promiscuous mode
[  166.627047][ T9070] debugfs: Directory 'hsr0' with parent '/' already present!
[  166.674680][ T9073] team0: Port device team_slave_0 added
[  166.687888][ T9073] team0: Port device team_slave_1 added
[  166.820253][ T9073] device hsr_slave_0 entered promiscuous mode
[  166.877468][ T9073] device hsr_slave_1 entered promiscuous mode
[  166.936986][ T9073] debugfs: Directory 'hsr0' with parent '/' already present!
[  167.002205][ T9080] chnl_net:caif_netlink_parms(): no params data found
[  167.032698][ T9070] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  167.103584][ T9070] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  167.196322][ T9070] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  167.238472][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.245742][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.254611][ T9080] device bridge_slave_0 entered promiscuous mode
[  167.263377][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.270538][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.278413][ T9080] device bridge_slave_1 entered promiscuous mode
[  167.285392][ T9078] chnl_net:caif_netlink_parms(): no params data found
[  167.315713][ T9070] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  167.425291][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.440857][ T9073] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  167.488902][ T9073] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  167.560507][ T9073] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  167.610911][ T9073] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  167.660975][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.670778][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.678144][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.686215][ T9078] device bridge_slave_0 entered promiscuous mode
[  167.700474][ T9082] chnl_net:caif_netlink_parms(): no params data found
[  167.732624][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.740278][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.749181][ T9078] device bridge_slave_1 entered promiscuous mode
[  167.771762][ T9080] team0: Port device team_slave_0 added
[  167.793873][ T9080] team0: Port device team_slave_1 added
[  167.818324][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.842584][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.854432][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.907934][ T9068] 8021q: adding VLAN 0 to HW filter on device team0
[  167.950511][ T9080] device hsr_slave_0 entered promiscuous mode
[  168.007209][ T9080] device hsr_slave_1 entered promiscuous mode
[  168.047077][ T9080] debugfs: Directory 'hsr0' with parent '/' already present!
[  168.062080][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.072143][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.100573][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.110006][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.119002][ T9082] device bridge_slave_0 entered promiscuous mode
[  168.136579][ T3215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.145468][ T3215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.154475][ T3215] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.161865][ T3215] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.173241][ T9078] team0: Port device team_slave_0 added
[  168.183373][ T9078] team0: Port device team_slave_1 added
[  168.206359][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.216498][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.224868][ T9082] device bridge_slave_1 entered promiscuous mode
[  168.242755][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.251455][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.260656][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.269787][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.276971][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.360244][ T9078] device hsr_slave_0 entered promiscuous mode
[  168.407248][ T9078] device hsr_slave_1 entered promiscuous mode
[  168.457029][ T9078] debugfs: Directory 'hsr0' with parent '/' already present!
[  168.471266][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.485497][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.494988][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.504143][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.513355][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.552846][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.566367][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.590600][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.600074][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.609341][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.619506][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.639533][ T9080] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  168.696558][ T9080] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  168.749342][ T9080] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  168.813177][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.822959][ T9082] team0: Port device team_slave_0 added
[  168.833924][ T9068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.846088][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.854505][ T9080] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  168.911918][ T9082] team0: Port device team_slave_1 added
[  168.920907][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.930283][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.942132][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.955140][ T9078] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.009825][ T9078] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.057275][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.069271][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.091546][ T9073] 8021q: adding VLAN 0 to HW filter on device team0
[  169.107444][ T9078] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.168935][ T9070] 8021q: adding VLAN 0 to HW filter on device team0
[  169.210210][ T9082] device hsr_slave_0 entered promiscuous mode
[  169.247362][ T9082] device hsr_slave_1 entered promiscuous mode
[  169.287060][ T9082] debugfs: Directory 'hsr0' with parent '/' already present!
[  169.295713][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.303922][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.311869][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.320944][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.330095][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.337206][ T9085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.345019][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.352948][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.361065][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.371921][ T9078] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.439245][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.453695][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.462841][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.469943][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.478818][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.488027][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.496617][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.503779][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.511994][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.521249][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.530380][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.537620][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.577644][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.606156][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.614912][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.623979][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.632636][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.642381][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.651319][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.660325][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.669571][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.678769][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.697680][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.705529][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.715166][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.724171][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.732750][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.741524][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.793740][ T9070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.812143][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.821302][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.830506][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.839215][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.848899][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.889047][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.902508][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.922154][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
02:13:48 executing program 0:
socket(0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071")
r1 = socket(0x10, 0x3, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200007ff}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a009b8a14e5f40700000000", 0xd4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

[  169.937599][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.988346][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.004434][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.025884][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.077560][ T9082] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  170.134038][ T9078] 8021q: adding VLAN 0 to HW filter on device team0
[  170.142395][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.150651][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.159232][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.167645][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.191140][ T9082] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  170.233555][ T9082] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  170.300639][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0
02:13:48 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

[  170.353035][ T9082] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  170.439131][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.446575][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.471480][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.483152][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.496604][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.503991][ T9085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.521248][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  170.542497][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.575576][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
02:13:48 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  170.587899][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.596914][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.604263][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.669820][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.704591][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.784024][    C1] hrtimer: interrupt took 28202 ns
[  170.817531][ T9080] 8021q: adding VLAN 0 to HW filter on device team0
[  170.830851][ T3215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.920587][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.934313][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
02:13:49 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  170.964889][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.997997][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  171.025132][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  171.046745][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.053933][ T9085] bridge0: port 1(bridge_slave_0) entered forwarding state
02:13:49 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

[  171.081487][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.106089][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.117049][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.134061][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.167909][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  171.167925][   T26] audit: type=1804 audit(1576116829.338:31): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir209705067/syzkaller.PGEugO/2/file0/file0" dev="loop0" ino=22 res=1
[  171.184314][ T9078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.251636][ T9078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.282257][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  171.300401][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  171.325976][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.333142][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.341662][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  171.350871][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.360560][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.369662][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.378592][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.387743][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
02:13:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1d, 0x4)

[  171.425839][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.443182][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
02:13:49 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8980, &(0x7f0000000440))

02:13:49 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  171.504425][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.534609][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.560505][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.588607][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
02:13:49 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  171.624213][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.655184][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.671114][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.696453][ T9082] 8021q: adding VLAN 0 to HW filter on device team0
[  171.787520][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.819498][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.863854][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.878834][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  171.926775][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  171.996098][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.013644][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.043900][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.051176][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.081043][ T9080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.150162][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.207012][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.215297][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.230332][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.240076][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.257539][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.266142][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.273743][ T9087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.338267][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
02:13:50 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001400)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)

[  172.408329][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.425326][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.450584][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.459530][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.469306][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.522616][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.538758][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.570794][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.578124][   T26] audit: type=1804 audit(1576116830.738:32): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir317426230/syzkaller.SeMoAz/1/memory.events" dev="sda1" ino=16534 res=1
[  172.626728][ T9082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.662383][ T9082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.679642][   T26] audit: type=1804 audit(1576116830.848:33): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir317426230/syzkaller.SeMoAz/1/memory.events" dev="sda1" ino=16534 res=1
[  172.703232][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.753431][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.807524][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.816239][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.831457][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.876244][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.926769][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.935196][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.959279][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0
02:13:51 executing program 4:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001400)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)

02:13:51 executing program 5:
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)

02:13:51 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

02:13:51 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:13:51 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:13:51 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001400)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)

[  173.276971][   T26] audit: type=1804 audit(1576116831.438:34): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir317426230/syzkaller.SeMoAz/2/memory.events" dev="sda1" ino=16548 res=1
02:13:51 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)

02:13:51 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001400)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)

[  173.521778][   T26] audit: type=1804 audit(1576116831.628:35): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir997622359/syzkaller.WBWJcX/1/memory.events" dev="sda1" ino=16553 res=1
02:13:51 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}], 0x1, 0x0)

[  173.682091][   T26] audit: type=1804 audit(1576116831.828:36): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir317426230/syzkaller.SeMoAz/3/memory.events" dev="sda1" ino=16560 res=1
02:13:51 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)

02:13:52 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

02:13:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

[  174.042409][ T9233] gfs2: not a GFS2 filesystem
02:13:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)

02:13:52 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  174.364603][ T9247] gfs2: not a GFS2 filesystem
02:13:52 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

02:13:52 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:13:52 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:13:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)

02:13:52 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  174.759144][ T9262] gfs2: not a GFS2 filesystem
02:13:53 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)

02:13:53 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  175.263073][ T9292] gfs2: not a GFS2 filesystem
02:13:53 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  175.505933][ T9302] gfs2: not a GFS2 filesystem
02:13:53 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  175.806665][ T9308] gfs2: not a GFS2 filesystem
02:13:56 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)

02:13:56 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

02:13:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)

02:13:56 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
dup(r0)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

02:13:56 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])

02:13:56 executing program 0:
r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="a9", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)=@secondary='builtin_and_secondary_trusted\x00')

[  178.368987][ T9326] gfs2: not a GFS2 filesystem
02:13:56 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0)
fcntl$setown(r0, 0x8, 0x0)

02:13:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mlockall(0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0)

[  178.498595][ T9341] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 970778, start 00000e80)
[  178.524004][ T9341] FAT-fs (loop2): Filesystem has been set read-only
02:13:56 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  178.600638][ T9347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  178.748073][ T9352] gfs2: not a GFS2 filesystem
02:13:57 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

02:13:57 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

02:13:57 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

02:13:57 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x5, 0x0)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
gettid()
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0x76656f)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000180))

[  179.094284][ T9365] gfs2: not a GFS2 filesystem
02:13:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1)
splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1)

02:13:57 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

[  179.357211][ T9377] gfs2: not a GFS2 filesystem
[  179.433279][ T9342] list_del corruption. prev->next should be ffff888092a99d50, but was ffff8882199eabf0
[  179.443981][ T9342] ------------[ cut here ]------------
[  179.449728][ T9342] kernel BUG at lib/list_debug.c:51!
[  179.455193][ T9342] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  179.461272][ T9342] CPU: 1 PID: 9342 Comm: syz-executor.4 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0
[  179.471091][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  179.481448][ T9342] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  179.487814][ T9342] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  179.507642][ T9342] RSP: 0018:ffffc90004b17c00 EFLAGS: 00010282
[  179.513913][ T9342] RAX: 0000000000000054 RBX: ffff8882199e7420 RCX: 0000000000000000
[  179.521893][ T9342] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000962f72
[  179.530105][ T9342] RBP: ffffc90004b17c18 R08: 0000000000000054 R09: ffffed1015d26621
[  179.538084][ T9342] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8882199e7520
[  179.546170][ T9342] R13: ffff8882199eabf0 R14: ffff888092a99d50 R15: ffff888092a99d50
[  179.554167][ T9342] FS:  000000000215a940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  179.563315][ T9342] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.569907][ T9342] CR2: 00007fca072f9000 CR3: 00000000a15cb000 CR4: 00000000001426e0
02:13:57 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@noacl='noacl'}]})

02:13:57 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  179.578258][ T9342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  179.586354][ T9342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  179.594412][ T9342] Call Trace:
[  179.597728][ T9342]  __dentry_kill+0x1fd/0x600
[  179.602538][ T9342]  ? dput+0x38/0xe10
[  179.602728][ T9380] kobject: 'loop2' (000000009e4fb1a8): kobject_uevent_env
[  179.606624][ T9342]  ? dput+0x38/0xe10
[  179.606636][ T9342]  dput+0x62f/0xe10
[  179.606652][ T9342]  simple_recursive_removal+0x5bc/0x6d0
[  179.606673][ T9342]  ? debugfs_rename+0x7f0/0x7f0
[  179.614300][ T9380] kobject: 'loop2' (000000009e4fb1a8): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  179.617833][ T9342]  debugfs_remove+0x5e/0x80
[  179.617850][ T9342]  kvm_put_kvm+0x136/0xcc0
[  179.617864][ T9342]  ? kvm_irqfd_release+0xe2/0x120
[  179.617876][ T9342]  ? kvm_irqfd_release+0xe2/0x120
[  179.617893][ T9342]  kvm_vm_release+0x44/0x60
[  179.637905][ T4087] kobject: 'loop1' (000000006a098a10): kobject_uevent_env
[  179.642316][ T9342]  __fput+0x2ff/0x890
[  179.642332][ T9342]  ? kvm_dev_ioctl+0x17d0/0x17d0
[  179.642349][ T9342]  ____fput+0x16/0x20
[  179.668785][ T4087] kobject: 'loop1' (000000006a098a10): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  179.673297][ T9342]  task_work_run+0x145/0x1c0
[  179.673316][ T9342]  exit_to_usermode_loop+0x316/0x380
[  179.673334][ T9342]  do_syscall_64+0x676/0x790
[  179.681983][ T9390] kobject: 'loop3' (00000000dfb4d2a1): kobject_uevent_env
[  179.682429][ T9342]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  179.688817][ T9390] kobject: 'loop3' (00000000dfb4d2a1): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  179.696530][ T9342] RIP: 0033:0x4144a1
[  179.696545][ T9342] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  179.696552][ T9342] RSP: 002b:00007ffc27f365d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  179.696563][ T9342] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144a1
[  179.696569][ T9342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  179.696575][ T9342] RBP: 0000000000000001 R08: 000000001ab9ef9f R09: 000000001ab9efa3
[  179.696591][ T9342] R10: 00007ffc27f366b0 R11: 0000000000000293 R12: 000000000075c9a0
[  179.715727][ T4087] kobject: 'loop2' (000000009e4fb1a8): kobject_uevent_env
[  179.718305][ T9342] R13: 000000000075c9a0 R14: 0000000000760290 R15: 000000000075bf2c
[  179.718318][ T9342] Modules linked in:
[  179.718380][ T9342] ---[ end trace 8d5f9d9d18627f38 ]---
[  179.733343][ T4087] kobject: 'loop2' (000000009e4fb1a8): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  179.734993][ T9342] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  179.766489][ T9390] gfs2: not a GFS2 filesystem
[  179.768066][ T9342] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  179.768074][ T9342] RSP: 0018:ffffc90004b17c00 EFLAGS: 00010282
[  179.768084][ T9342] RAX: 0000000000000054 RBX: ffff8882199e7420 RCX: 0000000000000000
02:13:58 executing program 1:
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0)
fcntl$dupfd(r0, 0x0, r0)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffff6c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  179.768091][ T9342] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000962f72
[  179.768099][ T9342] RBP: ffffc90004b17c18 R08: 0000000000000054 R09: ffffed1015d26621
[  179.768107][ T9342] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: ffff8882199e7520
[  179.768114][ T9342] R13: ffff8882199eabf0 R14: ffff888092a99d50 R15: ffff888092a99d50
[  179.768123][ T9342] FS:  000000000215a940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  179.768131][ T9342] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.768139][ T9342] CR2: 00007fca072f9000 CR3: 00000000a15cb000 CR4: 00000000001426e0
[  179.768148][ T9342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  179.768155][ T9342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  179.768170][ T9342] Kernel panic - not syncing: Fatal exception
[  179.964067][ T9342] Kernel Offset: disabled
[  179.968493][ T9342] Rebooting in 86400 seconds..