[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.524179][ T26] audit: type=1800 audit(1562951860.720:25): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.562404][ T26] audit: type=1800 audit(1562951860.720:26): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.612664][ T26] audit: type=1800 audit(1562951860.730:27): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.24' (ECDSA) to the list of known hosts. 2019/07/12 17:17:52 fuzzer started 2019/07/12 17:17:55 dialing manager at 10.128.0.26:37845 2019/07/12 17:17:55 syscalls: 2465 2019/07/12 17:17:55 code coverage: enabled 2019/07/12 17:17:55 comparison tracing: enabled 2019/07/12 17:17:55 extra coverage: extra coverage is not supported by the kernel 2019/07/12 17:17:55 setuid sandbox: enabled 2019/07/12 17:17:55 namespace sandbox: enabled 2019/07/12 17:17:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/12 17:17:55 fault injection: enabled 2019/07/12 17:17:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/12 17:17:55 net packet injection: enabled 2019/07/12 17:17:55 net device setup: enabled 17:18:33 executing program 0: syzkaller login: [ 118.257939][ T9228] IPVS: ftp: loaded support on port[0] = 21 17:18:33 executing program 1: [ 118.415737][ T9228] chnl_net:caif_netlink_parms(): no params data found [ 118.483239][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.491146][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.520536][ T9228] device bridge_slave_0 entered promiscuous mode [ 118.530776][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.538221][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.548689][ T9228] device bridge_slave_1 entered promiscuous mode [ 118.588608][ T9231] IPVS: ftp: loaded support on port[0] = 21 [ 118.601073][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.619757][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:18:33 executing program 2: [ 118.678124][ T9228] team0: Port device team_slave_0 added [ 118.694828][ T9228] team0: Port device team_slave_1 added [ 118.805743][ T9228] device hsr_slave_0 entered promiscuous mode [ 118.862654][ T9228] device hsr_slave_1 entered promiscuous mode 17:18:34 executing program 3: [ 118.969315][ T9233] IPVS: ftp: loaded support on port[0] = 21 [ 119.037135][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.044629][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.052794][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.059914][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.135988][ T9231] chnl_net:caif_netlink_parms(): no params data found 17:18:34 executing program 4: [ 119.238867][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.267818][ T9237] IPVS: ftp: loaded support on port[0] = 21 [ 119.307217][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.318210][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.326811][ T9231] device bridge_slave_0 entered promiscuous mode [ 119.338788][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.350623][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.375919][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.396293][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 119.427401][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.437596][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.446799][ T9231] device bridge_slave_1 entered promiscuous mode [ 119.459410][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.477986][ T9240] IPVS: ftp: loaded support on port[0] = 21 [ 119.547026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.558775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.567688][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.574835][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 17:18:34 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) [ 119.643192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.656280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.665077][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.672250][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.684160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.695863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.723186][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.745993][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.781995][ T9231] team0: Port device team_slave_0 added [ 119.793275][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.802386][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.811582][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.833878][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.845431][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.846275][ T9243] IPVS: ftp: loaded support on port[0] = 21 [ 119.854177][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.868243][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.877067][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.885652][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.895973][ T9231] team0: Port device team_slave_1 added [ 119.904468][ T9233] chnl_net:caif_netlink_parms(): no params data found [ 119.917918][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.998163][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.005559][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.015090][ T9233] device bridge_slave_0 entered promiscuous mode [ 120.048163][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.056138][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.064546][ T9233] device bridge_slave_1 entered promiscuous mode [ 120.135966][ T9231] device hsr_slave_0 entered promiscuous mode [ 120.192825][ T9231] device hsr_slave_1 entered promiscuous mode [ 120.252467][ T9231] debugfs: Directory 'hsr0' with parent '/' already present! [ 120.274601][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.346974][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.378979][ T9240] chnl_net:caif_netlink_parms(): no params data found [ 120.390466][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.495399][ T9233] team0: Port device team_slave_0 added [ 120.537434][ T9233] team0: Port device team_slave_1 added [ 120.545285][ T9237] chnl_net:caif_netlink_parms(): no params data found 17:18:35 executing program 0: [ 120.656880][ T9240] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.670040][ T9240] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.679705][ T9240] device bridge_slave_0 entered promiscuous mode 17:18:35 executing program 0: [ 120.765009][ T9240] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.775312][ T9240] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.785103][ T9240] device bridge_slave_1 entered promiscuous mode 17:18:36 executing program 0: [ 120.822927][ T9243] chnl_net:caif_netlink_parms(): no params data found 17:18:36 executing program 0: 17:18:36 executing program 0: [ 120.905468][ T9233] device hsr_slave_0 entered promiscuous mode [ 120.942845][ T9233] device hsr_slave_1 entered promiscuous mode 17:18:36 executing program 0: [ 121.003734][ T9233] debugfs: Directory 'hsr0' with parent '/' already present! [ 121.020625][ T9240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 17:18:36 executing program 0: [ 121.051226][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.074993][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.095586][ T9237] device bridge_slave_0 entered promiscuous mode [ 121.108522][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.118873][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.127056][ T9237] device bridge_slave_1 entered promiscuous mode [ 121.160952][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.181225][ T9240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.211628][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.250522][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.288497][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.296408][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.312533][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.319652][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.328513][ T9243] device bridge_slave_0 entered promiscuous mode [ 121.338761][ T9240] team0: Port device team_slave_0 added [ 121.358469][ T9240] team0: Port device team_slave_1 added [ 121.366873][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.374349][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.383280][ T9243] device bridge_slave_1 entered promiscuous mode [ 121.397311][ T9237] team0: Port device team_slave_0 added [ 121.405732][ T9237] team0: Port device team_slave_1 added [ 121.416602][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.436070][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.448034][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.514931][ T9240] device hsr_slave_0 entered promiscuous mode [ 121.562781][ T9240] device hsr_slave_1 entered promiscuous mode [ 121.612464][ T9240] debugfs: Directory 'hsr0' with parent '/' already present! [ 121.695842][ T9237] device hsr_slave_0 entered promiscuous mode [ 121.733957][ T9237] device hsr_slave_1 entered promiscuous mode [ 121.772403][ T9237] debugfs: Directory 'hsr0' with parent '/' already present! [ 121.789267][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.800154][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.810676][ T2829] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.818679][ T2829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.830914][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.885469][ T9243] team0: Port device team_slave_0 added [ 121.904637][ T9243] team0: Port device team_slave_1 added [ 121.911441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.920825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.930184][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.937629][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.947045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.996561][ T9267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.065493][ T9243] device hsr_slave_0 entered promiscuous mode [ 122.102780][ T9243] device hsr_slave_1 entered promiscuous mode [ 122.142416][ T9243] debugfs: Directory 'hsr0' with parent '/' already present! [ 122.177274][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.196063][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.205830][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.236840][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.245868][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.255346][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.264385][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.273467][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.310249][ T9231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.323057][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.345348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.355178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.368865][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.385812][ T9267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.394107][ T9267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.416622][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.433724][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.441156][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.456049][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.465211][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.472376][ T9244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.480940][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.528246][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.543699][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.552524][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.559637][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.567710][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.577747][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.594175][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.608965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.617929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.626732][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.637324][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.647796][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.655316][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.665169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.684396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.719780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:18:37 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x28) geteuid() ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) [ 122.737141][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.766531][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.795617][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 122.795634][ T26] audit: type=1804 audit(1562951917.990:31): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir015771732/syzkaller.b3dDjP/1/file0" dev="sda1" ino=16527 res=1 [ 122.814764][ T9233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.843370][ T26] audit: type=1804 audit(1562951917.990:32): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir015771732/syzkaller.b3dDjP/1/file0" dev="sda1" ino=16527 res=1 [ 122.846144][ T9233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.889993][ T9240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.912049][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.928637][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.938265][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.947206][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.956435][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.965304][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.974249][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.982798][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.991362][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.000015][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.007127][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.015763][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.023763][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.058688][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.069595][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.078718][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.087808][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.096627][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.106108][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.115257][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.126317][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.134753][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.143497][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.151843][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.160780][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.181683][ T9240] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.188995][ T9267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.198812][ T9267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.215544][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.224837][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.234074][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.241157][ T9236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.249228][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.257923][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.266462][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.273595][ T9236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.281961][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.291706][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.305344][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.337412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.346954][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.355792][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.362990][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.377709][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.387005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.395870][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.403099][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.410952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.420322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.441024][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.461170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.481287][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.490764][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.500781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.511660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.533703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.541834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.551521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.560971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.569678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.578412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.586848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.596254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.605671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.616229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.631077][ T9240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:18:38 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0xd4b9db3) unlink(&(0x7f00000004c0)='./file0\x00') clone(0x3ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000200)='./file1\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) [ 123.687579][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.711467][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.731058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.742085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.757756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.767921][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.811532][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.836276][ T9240] 8021q: adding VLAN 0 to HW filter on device batadv0 17:18:39 executing program 3: [ 123.882155][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 17:18:39 executing program 4: [ 124.225180][ C0] hrtimer: interrupt took 33208 ns 17:18:39 executing program 1: clock_gettime(0x4, &(0x7f0000000140)) 17:18:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@gid={'gid'}}]}) 17:18:39 executing program 2: 17:18:39 executing program 3: 17:18:39 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) 17:18:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 17:18:39 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) 17:18:39 executing program 3: syz_mount_image$ntfs(&(0x7f0000002200)='ntfs\x00', &(0x7f0000002240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={[{@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x800}}, {@utf8='utf8'}, {@errors_remount='errors=remount-ro'}, {@umask={'umask'}}], [{@uid_gt={'uid>'}}, {@fowner_gt={'fowner>'}}, {@euid_lt={'euid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x37, 0x37, 0x38, 0x31, 0x77, 0x34], 0x2d, [0x39, 0x7f, 0x38, 0x39], 0x2d, [0x37, 0x0, 0x7f, 0x30], 0x2d, [0x64, 0x37, 0x77, 0x75], 0x2d, [0x30, 0x63, 0x36, 0x34, 0x37, 0x62, 0x0, 0x67]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[securityvmnet0proc-(em1md5sum.uem0%}-securityproc'}}, {@seclabel='seclabel'}, {@dont_measure='dont_measure'}]}) 17:18:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x2}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1}]}, &(0x7f0000000300)='GPL\x00'}, 0x48) 17:18:39 executing program 4: [ 124.608618][ T9321] ISOFS: Unable to identify CD-ROM format. 17:18:39 executing program 5: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) 17:18:39 executing program 1: [ 124.730722][ T9340] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 17:18:40 executing program 2: 17:18:40 executing program 0: 17:18:40 executing program 4: [ 124.843540][ T9340] ntfs: (device loop3): parse_options(): Unrecognized mount option uid>00000000000000000000. [ 124.903814][ T9340] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner>00000000000000000000. 17:18:40 executing program 5: [ 124.962894][ T9340] ntfs: (device loop3): parse_options(): Unrecognized mount option euid<00000000000000000000. 17:18:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, 0x0) 17:18:40 executing program 4: execve(0x0, &(0x7f00000001c0)=[0x0], 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) 17:18:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) [ 125.092377][ T9340] ntfs: (device loop3): parse_options(): Unrecognized mount option fsuuid. [ 125.278545][ T9365] EXT4-fs (sda1): re-mounted. Opts: (null) [ 125.369883][ T9376] EXT4-fs (sda1): re-mounted. Opts: (null) 17:18:40 executing program 3: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 17:18:40 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd'}, &(0x7f0000000100)='./file0\x00', 0x0, 0x80020, 0x0) 17:18:40 executing program 5: add_key$user(&(0x7f0000000940)='user\x00', &(0x7f0000000980)={'syz'}, &(0x7f00000009c0)='8', 0x1, 0xfffffffffffffffb) 17:18:40 executing program 1: 17:18:40 executing program 5: 17:18:40 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:40 executing program 3: setreuid(0x0, 0xee00) setreuid(0x0, 0x0) 17:18:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000002) 17:18:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003d80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) pipe(&(0x7f0000000440)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000180), 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') 17:18:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x3) ioctl$EVIOCSKEYCODE(r0, 0x4020940d, &(0x7f00000000c0)=[0x4]) 17:18:41 executing program 4: execve(0x0, &(0x7f00000001c0)=[0x0], 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) 17:18:41 executing program 1: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 17:18:41 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000002) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) 17:18:41 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:41 executing program 3: getuid() fstat(0xffffffffffffffff, &(0x7f00000006c0)) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000880), 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000900)) tgkill(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000940)='user\x00', &(0x7f0000000980)={'syz'}, &(0x7f00000009c0)="38f721d5a96da074cfc4fc9382f074591fdea8084454ec8129e788e595aeb1649a3e0ae9abb1b025cb1f19960784841013e97f213243eaafafa534c538880625ecf05c4879aca8b4e67519ffd0ea121dcf8caeb83ff5d8de7075", 0x5a, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000008380), 0x8) 17:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003d80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) pipe(&(0x7f0000000440)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000180), 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') 17:18:41 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003d80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) pipe(&(0x7f0000000440)) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000180), 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') 17:18:41 executing program 3: stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x6, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}}) 17:18:41 executing program 5: 17:18:41 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:41 executing program 5: 17:18:42 executing program 4: 17:18:42 executing program 3: stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) pipe2(0x0, 0x4000) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x6, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}}) 17:18:42 executing program 1: 17:18:42 executing program 5: 17:18:42 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:42 executing program 2: 17:18:42 executing program 1: 17:18:42 executing program 5: 17:18:42 executing program 2: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="020000000100000000eeffff030000000000000010000200000000002000000000000000"], 0x24, 0x0) 17:18:42 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input//vent#\x00', 0x0, 0x0) 17:18:42 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x4b47, 0x0) 17:18:42 executing program 5: semget(0x1, 0x1000000000007, 0x200) 17:18:42 executing program 1: 17:18:42 executing program 2: 17:18:42 executing program 3: 17:18:42 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:42 executing program 3: 17:18:43 executing program 1: 17:18:43 executing program 2: 17:18:43 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) 17:18:43 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@fat=@dmask={'dmask'}}]}) 17:18:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:43 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) 17:18:43 executing program 1: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x1) 17:18:43 executing program 4: 17:18:43 executing program 2: [ 128.064047][ T9510] FAT-fs (loop5): bogus number of reserved sectors [ 128.129730][ T9510] FAT-fs (loop5): Can't find a valid FAT filesystem 17:18:43 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x6800) [ 128.250829][ T9510] FAT-fs (loop5): bogus number of reserved sectors 17:18:43 executing program 1: 17:18:43 executing program 4: 17:18:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) 17:18:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) [ 128.309793][ T9510] FAT-fs (loop5): Can't find a valid FAT filesystem 17:18:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 17:18:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x0) 17:18:43 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x10002) 17:18:43 executing program 4: msgsnd(0x0, &(0x7f0000000140), 0x4, 0x0) 17:18:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 17:18:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:43 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 17:18:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) 17:18:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)) 17:18:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:44 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 17:18:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) 17:18:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/.ev/input/event#\x00', 0x0, 0x0) [ 129.129853][ T9575] FAT-fs (loop1): bogus number of reserved sectors 17:18:44 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) [ 129.202834][ T9575] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) [ 129.311777][ T9575] FAT-fs (loop1): bogus number of reserved sectors 17:18:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) [ 129.366667][ T9575] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:44 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x210000) 17:18:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:44 executing program 2: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:44 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000240)=[0x0, 0xfffffffffffffffd]) 17:18:45 executing program 2: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) [ 129.818995][ T9617] FAT-fs (loop1): bogus number of reserved sectors 17:18:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) [ 129.880726][ T9617] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:45 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:45 executing program 2: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:45 executing program 4: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:45 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:45 executing program 5: 17:18:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:45 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) 17:18:45 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5460, 0x0) 17:18:45 executing program 5: 17:18:45 executing program 4: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) [ 130.353649][ T9653] FAT-fs (loop1): bogus number of reserved sectors [ 130.392607][ T9653] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:45 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) 17:18:45 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:45 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:45 executing program 5: 17:18:45 executing program 4: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:45 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/229) [ 130.747739][ T9680] FAT-fs (loop1): bogus number of reserved sectors 17:18:46 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:46 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) [ 130.803979][ T9680] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:46 executing program 5: 17:18:46 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:46 executing program 0: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:46 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:46 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:46 executing program 5: 17:18:46 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:46 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:46 executing program 5: 17:18:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:46 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:46 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:46 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:46 executing program 5: 17:18:47 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:47 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:47 executing program 5: 17:18:47 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:47 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:47 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:47 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:47 executing program 5: 17:18:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:47 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:47 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:47 executing program 5: 17:18:47 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:47 executing program 5: 17:18:47 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:47 executing program 5: 17:18:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:47 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:47 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:48 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:48 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:48 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:48 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@nocase='nocase'}]}) 17:18:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:48 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:48 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:48 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:48 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:48 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:48 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:18:48 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:48 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) [ 133.632616][ T9870] FAT-fs (loop1): bogus number of reserved sectors [ 133.670311][ T9870] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:48 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:48 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:18:49 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:49 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:49 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) [ 134.090398][ T9898] FAT-fs (loop1): bogus number of reserved sectors [ 134.121892][ T9898] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:49 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:18:49 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:49 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:49 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) [ 134.507470][ T9921] FAT-fs (loop1): bogus number of reserved sectors 17:18:49 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) [ 134.547710][ T9921] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:49 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 17:18:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:50 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:50 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) [ 135.072758][ T9958] FAT-fs (loop1): bogus number of reserved sectors 17:18:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) [ 135.155600][ T9958] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:50 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 17:18:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:50 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:50 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:50 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) [ 135.516338][ T9992] FAT-fs (loop1): bogus number of reserved sectors [ 135.554554][ T9992] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:50 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:50 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:50 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 17:18:51 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) [ 136.077562][T10031] FAT-fs (loop1): bogus number of reserved sectors 17:18:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:51 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:51 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) [ 136.122789][T10031] FAT-fs (loop1): Can't find a valid FAT filesystem 17:18:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:51 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:51 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80000000036) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000040)=[{0x80000006, 0x0, 0x0, 0x4}]}, 0x10) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 17:18:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:51 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:51 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) [ 136.712528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 136.718614][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:18:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:51 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:52 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000005) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000380)="0089818b54") listen(r2, 0x7fff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ppoll(&(0x7f00000004c0)=[{r3, 0x80}, {r3}, {r3}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000280)=0x5, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000ab80)={0x0, 0x0, 0x0}, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffb8) accept$ax25(0xffffffffffffff9c, &(0x7f0000000400)={{0x3, @rose}, [@netrom, @remote, @rose, @rose, @rose]}, 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = socket(0x0, 0x805, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x500}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x2000000000010d, 0x4000800000000a, &(0x7f0000000280), 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x100000000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) 17:18:52 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:52 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:52 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:52 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:52 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) 17:18:52 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:52 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c) 17:18:52 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/229) 17:18:52 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084502, &(0x7f00000001c0)=""/107) 17:18:52 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80084504, &(0x7f00000001c0)=""/107) 17:18:52 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x5460, 0x0) [ 137.937980][T10115] ------------[ cut here ]------------ [ 137.948683][T10115] jump label: negative count! [ 137.953840][T10115] WARNING: CPU: 0 PID: 10115 at kernel/jump_label.c:235 static_key_slow_try_dec+0x1ab/0x1d0 [ 137.963934][T10115] Kernel panic - not syncing: panic_on_warn set ... [ 137.970554][T10115] CPU: 0 PID: 10115 Comm: syz-executor.1 Not tainted 5.2.0-next-20190712 #37 [ 137.979429][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.989501][T10115] Call Trace: [ 137.992827][T10115] dump_stack+0x172/0x1f0 [ 137.997163][T10115] ? static_key_slow_try_dec+0xc0/0x1d0 [ 138.002711][T10115] panic+0x2dc/0x755 [ 138.006616][T10115] ? add_taint.cold+0x16/0x16 [ 138.011298][T10115] ? __kasan_check_write+0x14/0x20 [ 138.016488][T10115] ? __warn.cold+0x5/0x4c [ 138.020833][T10115] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 138.026482][T10115] __warn.cold+0x20/0x4c [ 138.030738][T10115] ? vprintk_emit+0x1ea/0x700 [ 138.035665][T10115] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 138.041289][T10115] report_bug+0x263/0x2b0 [ 138.045627][T10115] do_error_trap+0x11b/0x200 [ 138.050219][T10115] do_invalid_op+0x37/0x50 [ 138.054799][T10115] ? static_key_slow_try_dec+0x1ab/0x1d0 [ 138.060684][T10115] invalid_op+0x14/0x20 [ 138.064844][T10115] RIP: 0010:static_key_slow_try_dec+0x1ab/0x1d0 [ 138.071083][T10115] Code: c0 e8 a9 07 e5 ff 83 fb 01 0f 85 32 ff ff ff e8 1b 06 e5 ff 45 31 ff eb a0 e8 11 06 e5 ff 48 c7 c7 c0 f9 92 87 e8 3d 6e b6 ff <0f> 0b eb 8b 4c 89 e7 e8 59 45 1f 00 e9 de fe ff ff e8 df 66 b6 ff [ 138.090785][T10115] RSP: 0018:ffff88806158f450 EFLAGS: 00010286 [ 138.096860][T10115] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000000 [ 138.104864][T10115] RDX: 00000000000130f4 RSI: ffffffff815c3926 RDI: ffffed100c2b1e7c [ 138.112839][T10115] RBP: ffff88806158f4e0 R08: ffff888067150500 R09: ffffed1015d060b1 [ 138.120822][T10115] R10: ffffed1015d060b0 R11: ffff8880ae830587 R12: ffffffff89866d00 [ 138.128790][T10115] R13: ffff88806158f4b8 R14: 1ffff1100c2b1e8b R15: 00000000ffffff01 [ 138.136797][T10115] ? vprintk_func+0x86/0x189 [ 138.141385][T10115] ? static_key_disable+0x30/0x30 [ 138.146785][T10115] ? fl6_renew+0x1aa/0x280 [ 138.151223][T10115] __static_key_slow_dec_deferred+0x65/0x110 [ 138.157195][T10115] fl_free+0xa9/0xe0 [ 138.161077][T10115] fl_create+0x6af/0x9f0 [ 138.165404][T10115] ? ip6fl_seq_next+0xb0/0xb0 [ 138.170080][T10115] ? __might_fault+0x12b/0x1e0 [ 138.174838][T10115] ? find_held_lock+0x35/0x130 [ 138.179588][T10115] ? __might_fault+0x12b/0x1e0 [ 138.184371][T10115] ? lock_downgrade+0x920/0x920 [ 138.189233][T10115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 138.195467][T10115] ipv6_flowlabel_opt+0x80e/0x2730 [ 138.200574][T10115] ? ipv6_flowlabel_opt_get+0xa10/0xa10 [ 138.206124][T10115] ? lockdep_hardirqs_on+0x418/0x5d0 [ 138.211428][T10115] ? lock_sock_nested+0x9a/0x120 [ 138.216468][T10115] ? lock_sock_nested+0x9a/0x120 [ 138.221429][T10115] ? __local_bh_enable_ip+0x15a/0x270 [ 138.226854][T10115] do_ipv6_setsockopt.isra.0+0x2125/0x4120 [ 138.232692][T10115] ? do_ipv6_setsockopt.isra.0+0x2125/0x4120 [ 138.238765][T10115] ? ipv6_update_options+0x3b0/0x3b0 [ 138.244072][T10115] ? ___might_sleep+0x163/0x280 [ 138.248938][T10115] ? __might_sleep+0x95/0x190 [ 138.253615][T10115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 138.259887][T10115] ? futex_wait_queue_me+0x414/0x600 [ 138.265181][T10115] ? handle_futex_death.part.0+0x250/0x250 [ 138.270998][T10115] ? lock_pi_update_atomic+0x120/0x120 [ 138.276451][T10115] ? get_futex_key_refs.isra.0+0x72/0xc0 [ 138.282082][T10115] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 138.287993][T10115] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 138.293755][T10115] ? __kasan_check_read+0x11/0x20 [ 138.298775][T10115] ? mark_lock+0xc0/0x11e0 [ 138.303237][T10115] ? __kasan_check_read+0x11/0x20 [ 138.308279][T10115] ? __lock_acquire+0x8a2/0x4c30 [ 138.313232][T10115] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 138.318957][T10115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 138.325331][T10115] ? aa_label_sk_perm+0x101/0x560 [ 138.330376][T10115] ? __fget+0x35d/0x560 [ 138.334541][T10115] ? aa_profile_af_perm+0x320/0x320 [ 138.339848][T10115] ? __fget+0x35d/0x560 [ 138.344023][T10115] ? lock_downgrade+0x920/0x920 [ 138.348902][T10115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 138.355163][T10115] ? __kasan_check_read+0x11/0x20 [ 138.360224][T10115] ? ___might_sleep+0x163/0x280 [ 138.365097][T10115] ? __might_sleep+0x95/0x190 [ 138.369793][T10115] ipv6_setsockopt+0xf6/0x170 [ 138.374468][T10115] ? ipv6_setsockopt+0xf6/0x170 [ 138.379350][T10115] rawv6_setsockopt+0x5e/0x150 [ 138.384126][T10115] sock_common_setsockopt+0x94/0xd0 [ 138.389333][T10115] __sys_setsockopt+0x261/0x4c0 [ 138.394184][T10115] ? sock_create_kern+0x50/0x50 [ 138.399181][T10115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 138.404660][T10115] ? do_syscall_64+0x26/0x6a0 [ 138.409349][T10115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 138.415418][T10115] ? do_syscall_64+0x26/0x6a0 [ 138.420464][T10115] __x64_sys_setsockopt+0xbe/0x150 [ 138.425600][T10115] do_syscall_64+0xfd/0x6a0 [ 138.430148][T10115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 138.436045][T10115] RIP: 0033:0x459819 [ 138.439957][T10115] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 138.459587][T10115] RSP: 002b:00007fe714382c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.468116][T10115] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459819 [ 138.476106][T10115] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 138.484528][T10115] RBP: 000000000075c1c0 R08: 0000000000000020 R09: 0000000000000000 [ 138.492553][T10115] R10: 0000000020000080 R11: 0000000000000246 R12: 00007fe7143836d4 [ 138.500532][T10115] R13: 00000000004cec98 R14: 00000000004dd5c0 R15: 00000000ffffffff [ 138.509650][T10115] Kernel Offset: disabled [ 138.514079][T10115] Rebooting in 86400 seconds..