[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.848051][ T26] audit: type=1800 audit(1566886012.481:25): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.892188][ T26] audit: type=1800 audit(1566886012.491:26): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.938554][ T26] audit: type=1800 audit(1566886012.491:27): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2019/08/27 06:06:59 fuzzer started 2019/08/27 06:07:02 dialing manager at 10.128.0.26:45029 2019/08/27 06:07:03 syscalls: 2487 2019/08/27 06:07:03 code coverage: enabled 2019/08/27 06:07:03 comparison tracing: enabled 2019/08/27 06:07:03 extra coverage: extra coverage is not supported by the kernel 2019/08/27 06:07:03 setuid sandbox: enabled 2019/08/27 06:07:03 namespace sandbox: enabled 2019/08/27 06:07:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/27 06:07:03 fault injection: enabled 2019/08/27 06:07:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/27 06:07:03 net packet injection: enabled 2019/08/27 06:07:03 net device setup: enabled 06:09:01 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000080)=0x2) 06:09:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$9p(r2, &(0x7f00000007c0)="3af6e12a85499d68fece00c2448a142df197f5748288bd94afcc16c27a0b6ca341107faaeb840cb8a63092e7b5fc3b56e3435f32794e143b0af66c5a6f1fcaaa1b0bce7d9e0bddf48dd8e1a36acc68b055df1cc9b5d493be93356455720aea1b04afcd", 0x63) syzkaller login: [ 184.351576][ T8725] IPVS: ftp: loaded support on port[0] = 21 [ 184.506305][ T8725] chnl_net:caif_netlink_parms(): no params data found [ 184.574733][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.583434][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.591306][ T8725] device bridge_slave_0 entered promiscuous mode [ 184.603845][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.610958][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state 06:09:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{}, {0x0, @local}, 0x0, {}, 'lo\x00'}) [ 184.619132][ T8725] device bridge_slave_1 entered promiscuous mode [ 184.639536][ T8728] IPVS: ftp: loaded support on port[0] = 21 [ 184.647466][ T8725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.659084][ T8725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.694745][ T8725] team0: Port device team_slave_0 added [ 184.729026][ T8725] team0: Port device team_slave_1 added 06:09:02 executing program 3: creat(0x0, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000004480)={0x10000000000001, 0x84, 0x800000005, 0x3, 0x0, 0xffffffffffffffff, 0x8, [], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 184.845467][ T8725] device hsr_slave_0 entered promiscuous mode [ 184.913473][ T8725] device hsr_slave_1 entered promiscuous mode 06:09:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x4000000000001b2, 0x0) [ 185.103202][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.110416][ T8725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.118319][ T8725] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.125434][ T8725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.191940][ T8732] IPVS: ftp: loaded support on port[0] = 21 [ 185.209737][ T8730] IPVS: ftp: loaded support on port[0] = 21 [ 185.294950][ T8728] chnl_net:caif_netlink_parms(): no params data found 06:09:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) getpgrp(0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000005c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = accept(r1, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x1000000, 0x0) write(r2, &(0x7f0000000100), 0x1ede5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) shutdown(r2, 0x2) sendto$packet(r3, &(0x7f0000000040)='u', 0xffa8, 0x0, 0x0, 0x0) [ 185.391407][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 185.429848][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.439317][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.448517][ T8728] device bridge_slave_0 entered promiscuous mode [ 185.468233][ T8725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.508127][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.520912][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.534497][ T8728] device bridge_slave_1 entered promiscuous mode [ 185.545401][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 185.565968][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.585484][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.594281][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 185.632924][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.645024][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.659765][ T8739] IPVS: ftp: loaded support on port[0] = 21 [ 185.692377][ T8728] team0: Port device team_slave_0 added [ 185.700953][ T8728] team0: Port device team_slave_1 added [ 185.727393][ T8725] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.757057][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.764827][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.875117][ T8728] device hsr_slave_0 entered promiscuous mode [ 185.942726][ T8728] device hsr_slave_1 entered promiscuous mode [ 185.992277][ T8728] debugfs: Directory 'hsr0' with parent '/' already present! [ 186.000647][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.007783][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.016009][ T8732] device bridge_slave_0 entered promiscuous mode [ 186.023995][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.032726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.041020][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.048085][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.079510][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.088073][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.096227][ T8732] device bridge_slave_1 entered promiscuous mode [ 186.115861][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.124427][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.132815][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.139852][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.159227][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.171609][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 186.181745][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.215164][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.228508][ T8732] team0: Port device team_slave_0 added [ 186.236377][ T8732] team0: Port device team_slave_1 added [ 186.280183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.288934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.298061][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.306496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.315410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.323872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.337884][ T8725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.348705][ T8725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.404805][ T8732] device hsr_slave_0 entered promiscuous mode [ 186.442441][ T8732] device hsr_slave_1 entered promiscuous mode [ 186.482166][ T8732] debugfs: Directory 'hsr0' with parent '/' already present! [ 186.490529][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.499092][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.507733][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.515953][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.524579][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.535840][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 186.576799][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.584478][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.593669][ T8730] device bridge_slave_0 entered promiscuous mode [ 186.605602][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.612985][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.620553][ T8730] device bridge_slave_1 entered promiscuous mode [ 186.642777][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.675673][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.744868][ T8725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.765231][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.773717][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.780766][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.788667][ T8736] device bridge_slave_0 entered promiscuous mode [ 186.797070][ T8730] team0: Port device team_slave_0 added [ 186.806831][ T8739] chnl_net:caif_netlink_parms(): no params data found [ 186.830405][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.839716][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.848238][ T8736] device bridge_slave_1 entered promiscuous mode [ 186.858561][ T8730] team0: Port device team_slave_1 added [ 186.897416][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.919089][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.930372][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.939788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.947832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.956755][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.971746][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.979489][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.989040][ T8739] device bridge_slave_0 entered promiscuous mode [ 186.999345][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.006795][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.014786][ T8739] device bridge_slave_1 entered promiscuous mode [ 187.034082][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.048095][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.076798][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.087913][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.095028][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.103372][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.111462][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.164019][ T8730] device hsr_slave_0 entered promiscuous mode [ 187.212636][ T8730] device hsr_slave_1 entered promiscuous mode [ 187.252235][ T8730] debugfs: Directory 'hsr0' with parent '/' already present! 06:09:04 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) [ 187.266915][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.275671][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.284624][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.302538][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.309592][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.328638][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.348162][ T8736] team0: Port device team_slave_0 added 06:09:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) lstat(&(0x7f0000000080)='./file0\x00', 0x0) munlockall() syz_open_procfs(0xffffffffffffffff, 0x0) [ 187.381889][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.404393][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.421031][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.442928][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.458392][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.459372][ T8758] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.467028][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.491519][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.502543][ T8736] team0: Port device team_slave_1 added [ 187.522888][ T8732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.536693][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.550302][ C0] hrtimer: interrupt took 25394 ns [ 187.567280][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.575939][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.584957][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.602687][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.609747][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.618505][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.627324][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.636004][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.644625][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.653362][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.661155][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.710579][ T8739] team0: Port device team_slave_0 added [ 187.718442][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.731716][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.747250][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.755049][ T8741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.768562][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.814887][ T8739] team0: Port device team_slave_1 added [ 187.824221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.833407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.843121][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.851539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.861190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.870598][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.879168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.925717][ T8736] device hsr_slave_0 entered promiscuous mode [ 187.968529][ T8736] device hsr_slave_1 entered promiscuous mode [ 188.032238][ T8736] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.046218][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.075621][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.084959][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.094724][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.106739][ T8728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.155147][ T8739] device hsr_slave_0 entered promiscuous mode [ 188.189000][ T8739] device hsr_slave_1 entered promiscuous mode [ 188.242153][ T8739] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.321133][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.378050][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.386887][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.411782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.427619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.491575][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.505523][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.528803][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.535948][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.543921][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.552970][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.561262][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.568345][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.576782][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.586709][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.602507][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.611599][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.628153][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.680368][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.712318][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 06:09:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00H') r1 = openat$cgroup_ro(r0, &(0x7f0000001fc0)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bJ\x1f\xf0>\x18\xed\xb0\r.8\xaa\x92\xc7cw\xd6\xaf\xbe\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcf\x00\x00\x00\x00\x1aO\xb4\xf0_\xbd>\xf3\x1b\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba\xa9\x0e$\x16\xbcw\xff&DRYp\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbcs\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x00\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/\x94 J\xc8x\xb6#a\xa5[\xbe\x0f\xe1\xf1=\xdd\xfb\xcb\xb0\xe5\xfd\x10wxF\x93\x03cK\r\xb6%\xa6\x0e\xfa\xcd\x18\xe0\x1e\xae\xc5\xa2\xe1*)\xb7]\x99\x83\xe8\xc3\xc1\xb9\x1d0\x9c\x98\xadRm', 0x0, 0x0) preadv(r1, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x1000000000000220, 0x800000) [ 188.791532][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.805380][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.843948][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.860914][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 06:09:06 executing program 3: unshare(0x20000400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) [ 188.895263][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.919650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 06:09:06 executing program 0: clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x42000200) r0 = gettid() tkill(r0, 0x25) process_vm_writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000014c0)=[{&(0x7f0000001100)=""/25, 0x19}], 0x1, 0x0) [ 188.947363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.978414][ T8730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 06:09:06 executing program 3: semop(0x0, 0x0, 0xa9b01d486ca589ab) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x40000) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 189.038678][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.043489][ T8790] IPVS: ftp: loaded support on port[0] = 21 [ 189.063998][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.084290][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.104384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.128182][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.155878][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.165030][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.173541][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.182635][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.191479][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.198601][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.218088][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.228091][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.244605][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.251702][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state 06:09:06 executing program 3: semop(0x0, 0x0, 0xa9b01d486ca589ab) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x40000) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 189.288053][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.311394][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.371271][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.397634][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.415807][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.430435][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.450451][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.460935][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.476915][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.486831][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.493943][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.508964][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.517265][ T3506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.540282][ T8736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.563031][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.585329][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.615798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.638638][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.661762][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.687423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.696234][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.703336][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.711005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.719476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.727830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.738381][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.746384][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.785812][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.799609][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.816162][ T8794] IPVS: ftp: loaded support on port[0] = 21 [ 189.832935][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.861136][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.875922][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.890323][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.901238][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.911933][ T8741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.968073][ T8739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.986637][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.022660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.033425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.137862][ T8739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.589213][ T8838] mmap: syz-executor.5 (8838) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:09:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x40000) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17, 0x5b03}) 06:09:15 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40201, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:09:15 executing program 2: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 06:09:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaae53, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000000000006d5ebe5a0000ffff53ef", 0x5cf, 0x400}], 0x1, 0x0) 06:09:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) getpgrp(0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000005c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = accept(r1, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000140), 0x1000000, 0x0) write(r2, &(0x7f0000000100), 0x1ede5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) shutdown(r2, 0x2) sendto$packet(r3, &(0x7f0000000040)='u', 0xffa8, 0x0, 0x0, 0x0) 06:09:15 executing program 0: getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) [ 197.772741][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 197.778742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 197.849762][ T8850] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 197.858985][ T8850] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 197.876558][ T8850] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 197.906095][ T8850] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 197.930092][ T8850] EXT4-fs error (device loop4): ext4_fill_super:4469: inode #2: comm syz-executor.4: iget: root inode unallocated 06:09:15 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x16) [ 197.959553][ T8850] EXT4-fs (loop4): get root inode failed [ 197.986887][ T8850] EXT4-fs (loop4): mount failed [ 198.006597][ T8850] ------------[ cut here ]------------ [ 198.012092][ T8850] ODEBUG: free active (active state 0) object type: percpu_counter hint: 0x0 [ 198.021151][ T8850] WARNING: CPU: 1 PID: 8850 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 198.021758][ T3890] kobject: 'loop2' (00000000a460f78d): kobject_uevent_env [ 198.030596][ T8850] Kernel panic - not syncing: panic_on_warn set ... [ 198.030621][ T8850] CPU: 1 PID: 8850 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190826 #73 [ 198.030628][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.030639][ T8850] Call Trace: [ 198.030657][ T8850] dump_stack+0x172/0x1f0 [ 198.068490][ T3890] kobject: 'loop2' (00000000a460f78d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.071028][ T8850] ? debug_print_object+0x90/0x250 [ 198.071045][ T8850] panic+0x2dc/0x755 [ 198.071059][ T8850] ? add_taint.cold+0x16/0x16 [ 198.071082][ T8850] ? __kasan_check_write+0x14/0x20 [ 198.099935][ T8850] ? __warn.cold+0x14/0x3c [ 198.104367][ T8850] ? debug_print_object+0x168/0x250 06:09:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) [ 198.109574][ T8850] __warn.cold+0x2f/0x3c [ 198.113935][ T8850] ? debug_print_object+0x168/0x250 [ 198.119138][ T8850] report_bug+0x289/0x300 [ 198.123481][ T8850] do_error_trap+0x11b/0x200 [ 198.126556][ T3890] kobject: 'loop5' (00000000e0305b1e): kobject_uevent_env [ 198.128083][ T8850] do_invalid_op+0x37/0x50 [ 198.139586][ T8850] ? debug_print_object+0x168/0x250 [ 198.144301][ T3890] kobject: 'loop5' (00000000e0305b1e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 198.144792][ T8850] invalid_op+0x23/0x30 [ 198.159054][ T8850] RIP: 0010:debug_print_object+0x168/0x250 [ 198.164861][ T8850] Code: dd 60 6c e6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 6c e6 87 48 c7 c7 c0 61 e6 87 e8 20 31 01 fe <0f> 0b 83 05 f3 67 83 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 198.184458][ T8850] RSP: 0018:ffff88805a75f938 EFLAGS: 00010086 [ 198.190532][ T8850] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 198.198508][ T8850] RDX: 0000000000040000 RSI: ffffffff815bd606 RDI: ffffed100b4ebf19 [ 198.206484][ T8850] RBP: ffff88805a75f978 R08: ffff88805a756100 R09: ffffed1015d24109 [ 198.214461][ T8850] R10: ffffed1015d24108 R11: ffff8880ae920847 R12: 0000000000000001 [ 198.222431][ T8850] R13: ffffffff8935e800 R14: 0000000000000000 R15: ffff888095e96038 [ 198.230413][ T8850] ? vprintk_func+0x86/0x189 [ 198.234991][ T8850] ? debug_print_object+0x168/0x250 [ 198.240175][ T8850] debug_check_no_obj_freed+0x2d4/0x43f [ 198.245701][ T8850] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 198.251231][ T8850] kfree+0xf8/0x2c0 [ 198.255024][ T8850] ext4_fill_super+0x8cb/0xcc80 [ 198.259877][ T8850] ? ext4_calculate_overhead+0x1250/0x1250 [ 198.265667][ T8850] ? vsprintf+0x40/0x40 [ 198.269900][ T8850] ? wait_for_completion+0x440/0x440 [ 198.275170][ T8850] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 198.280957][ T8850] ? set_blocksize+0x2bf/0x340 [ 198.285707][ T8850] mount_bdev+0x304/0x3c0 [ 198.290017][ T8850] ? mount_bdev+0x304/0x3c0 [ 198.294500][ T8850] ? ext4_calculate_overhead+0x1250/0x1250 [ 198.300289][ T8850] ext4_mount+0x35/0x40 [ 198.304428][ T8850] ? ext4_nfs_get_inode+0xe0/0xe0 [ 198.309435][ T8850] legacy_get_tree+0x113/0x220 [ 198.314181][ T8850] ? ns_capable_common+0x93/0x100 [ 198.319185][ T8850] vfs_get_tree+0x8f/0x380 [ 198.323583][ T8850] do_mount+0x13b3/0x1c30 [ 198.327897][ T8850] ? copy_mount_string+0x40/0x40 [ 198.332822][ T8850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.339041][ T8850] ? copy_mount_options+0x2e8/0x3f0 [ 198.344221][ T8850] ksys_mount+0xdb/0x150 [ 198.348444][ T8850] __x64_sys_mount+0xbe/0x150 [ 198.353117][ T8850] do_syscall_64+0xfa/0x760 [ 198.357604][ T8850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 198.363477][ T8850] RIP: 0033:0x45c2ca [ 198.367355][ T8850] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 198.386938][ T8850] RSP: 002b:00007f7b6ce48a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 198.395327][ T8850] RAX: ffffffffffffffda RBX: 00007f7b6ce48b40 RCX: 000000000045c2ca [ 198.403280][ T8850] RDX: 00007f7b6ce48ae0 RSI: 0000000020000000 RDI: 00007f7b6ce48b00 [ 198.411233][ T8850] RBP: 0000000000001000 R08: 00007f7b6ce48b40 R09: 00007f7b6ce48ae0 [ 198.419187][ T8850] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000004 [ 198.427136][ T8850] R13: 00000000004c89d6 R14: 00000000004df8f8 R15: 00000000ffffffff [ 198.436598][ T8850] Kernel Offset: disabled [ 198.440994][ T8850] Rebooting in 86400 seconds..