[info] Using makefile-style concurrent boot in runlevel 2.
[   43.496054][   T27] audit: type=1800 audit(1585255480.690:21): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0
[   43.543697][   T27] audit: type=1800 audit(1585255480.690:22): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts.
2020/03/26 20:44:49 fuzzer started
2020/03/26 20:44:51 dialing manager at 10.128.0.105:44023
2020/03/26 20:44:51 syscalls: 2955
2020/03/26 20:44:51 code coverage: enabled
2020/03/26 20:44:51 comparison tracing: enabled
2020/03/26 20:44:51 extra coverage: enabled
2020/03/26 20:44:51 setuid sandbox: enabled
2020/03/26 20:44:51 namespace sandbox: enabled
2020/03/26 20:44:51 Android sandbox: /sys/fs/selinux/policy does not exist
2020/03/26 20:44:51 fault injection: enabled
2020/03/26 20:44:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/03/26 20:44:51 net packet injection: enabled
2020/03/26 20:44:51 net device setup: enabled
2020/03/26 20:44:51 concurrency sanitizer: enabled
2020/03/26 20:44:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
syzkaller login: [   56.529099][ T7792] KCSAN: could not find function: '_find_next_bit'
[   57.067627][ T7792] KCSAN: could not find function: 'poll_schedule_timeout'
2020/03/26 20:44:55 adding functions to KCSAN blacklist: 'wbt_done' 'do_syslog' 'tick_nohz_idle_stop_tick' 'blk_mq_get_request' '__bpf_lru_node_move_in' 'mod_timer' 'find_get_pages_range_tag' 'shmem_getpage_gfp' 'lruvec_lru_size' 'do_nanosleep' 'ktime_get_real_seconds' 'list_lru_count_one' 'shmem_file_read_iter' 'page_counter_try_charge' 'blk_mq_dispatch_rq_list' 'ext4_has_free_clusters' 'timer_clear_idle' '_find_next_bit' 'do_signal_stop' 'audit_log_start' 'poll_schedule_timeout' 'do_exit' 'blk_mq_sched_dispatch_requests' '__ext4_new_inode' '__delete_from_page_cache' 'xas_clear_mark' 'pcpu_alloc' 'add_timer' 'run_timer_softirq' 'atime_needs_update' 'ep_poll' 'generic_write_end' 'copy_process' 'ext4_free_inodes_count' 'kauditd_thread' 'tick_sched_do_timer' 'ext4_mark_iloc_dirty' 
20:47:33 executing program 0:

20:47:33 executing program 1:

[  216.357074][ T7796] IPVS: ftp: loaded support on port[0] = 21
[  216.431298][ T7796] chnl_net:caif_netlink_parms(): no params data found
[  216.495899][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.503681][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.511562][ T7796] device bridge_slave_0 entered promiscuous mode
[  216.520558][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.528339][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.536446][ T7796] device bridge_slave_1 entered promiscuous mode
[  216.554295][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.566452][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.601878][ T7802] IPVS: ftp: loaded support on port[0] = 21
[  216.615770][ T7796] team0: Port device team_slave_0 added
[  216.628614][ T7796] team0: Port device team_slave_1 added
[  216.672518][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.679886][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
20:47:33 executing program 2:

[  216.741876][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.781907][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.788941][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.851926][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.881405][ T7802] chnl_net:caif_netlink_parms(): no params data found
[  216.900595][ T7805] IPVS: ftp: loaded support on port[0] = 21
20:47:34 executing program 3:

[  216.983976][ T7796] device hsr_slave_0 entered promiscuous mode
[  217.052329][ T7796] device hsr_slave_1 entered promiscuous mode
[  217.125669][ T7807] IPVS: ftp: loaded support on port[0] = 21
20:47:34 executing program 4:

[  217.247096][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.255161][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.262834][ T7802] device bridge_slave_0 entered promiscuous mode
[  217.313531][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.320591][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.342423][ T7802] device bridge_slave_1 entered promiscuous mode
[  217.369081][ T7807] chnl_net:caif_netlink_parms(): no params data found
[  217.403011][ T7796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.464191][ T7796] netdevsim netdevsim0 netdevsim1: renamed from eth1
20:47:34 executing program 5:

[  217.516813][ T7805] chnl_net:caif_netlink_parms(): no params data found
[  217.547235][ T7815] IPVS: ftp: loaded support on port[0] = 21
[  217.554671][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.567767][ T7796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.634390][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.655862][ T7796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.741120][ T7817] IPVS: ftp: loaded support on port[0] = 21
[  217.753167][ T7802] team0: Port device team_slave_0 added
[  217.761729][ T7802] team0: Port device team_slave_1 added
[  217.799917][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.807626][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.834274][ T7802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.851446][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.858449][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.884460][ T7802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.921306][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.928442][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.936146][ T7807] device bridge_slave_0 entered promiscuous mode
[  217.947413][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.954529][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.962494][ T7807] device bridge_slave_1 entered promiscuous mode
[  217.982825][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.995614][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.002883][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.010474][ T7805] device bridge_slave_0 entered promiscuous mode
[  218.019353][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.045139][ T7807] team0: Port device team_slave_0 added
[  218.063366][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.070418][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.079599][ T7805] device bridge_slave_1 entered promiscuous mode
[  218.133380][ T7802] device hsr_slave_0 entered promiscuous mode
[  218.182065][ T7802] device hsr_slave_1 entered promiscuous mode
[  218.221881][ T7802] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.229453][ T7802] Cannot create hsr debugfs directory
[  218.235891][ T7807] team0: Port device team_slave_1 added
[  218.295375][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.311557][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.319022][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.345764][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.359655][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.366735][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.393191][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.404250][ T7815] chnl_net:caif_netlink_parms(): no params data found
[  218.416508][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.456663][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.490726][ T7817] chnl_net:caif_netlink_parms(): no params data found
[  218.509696][ T7805] team0: Port device team_slave_0 added
[  218.584004][ T7807] device hsr_slave_0 entered promiscuous mode
[  218.622318][ T7807] device hsr_slave_1 entered promiscuous mode
[  218.691940][ T7807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.699645][ T7807] Cannot create hsr debugfs directory
[  218.709098][ T7805] team0: Port device team_slave_1 added
[  218.729720][ T7796] 8021q: adding VLAN 0 to HW filter on device team0
[  218.745453][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  218.754145][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  218.775799][ T7802] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  218.856779][ T7802] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  218.915177][ T7802] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  218.985941][ T7802] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  219.053069][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  219.062762][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  219.071121][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.078194][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.088992][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.096032][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.122181][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.138072][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  219.156583][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.163639][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.190076][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.213819][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.220864][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.228681][ T7815] device bridge_slave_0 entered promiscuous mode
[  219.236494][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  219.245729][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  219.254038][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.261184][ T3110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.269180][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  219.324169][ T7805] device hsr_slave_0 entered promiscuous mode
[  219.352148][ T7805] device hsr_slave_1 entered promiscuous mode
[  219.401893][ T7805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.409466][ T7805] Cannot create hsr debugfs directory
[  219.416974][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.424340][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.432402][ T7815] device bridge_slave_1 entered promiscuous mode
[  219.443369][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  219.470374][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.502477][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  219.511272][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  219.533128][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.558596][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  219.567132][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  219.578515][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  219.587126][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  219.595703][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  219.604088][ T7807] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  219.659841][ T7807] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  219.703644][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.710789][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.720410][ T7817] device bridge_slave_0 entered promiscuous mode
[  219.729194][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.736322][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.743999][ T7817] device bridge_slave_1 entered promiscuous mode
[  219.757337][ T7815] team0: Port device team_slave_0 added
[  219.763481][ T7807] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  219.825469][ T7807] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  219.912498][ T7815] team0: Port device team_slave_1 added
[  219.926188][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  219.935982][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  219.955482][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  219.978386][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.985404][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.012197][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.027075][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.034674][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.061215][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.075666][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.103856][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.141997][ T7817] team0: Port device team_slave_0 added
[  220.150960][ T7817] team0: Port device team_slave_1 added
[  220.157878][ T7805] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  220.227816][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.283899][ T7815] device hsr_slave_0 entered promiscuous mode
[  220.322148][ T7815] device hsr_slave_1 entered promiscuous mode
[  220.361921][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.369540][ T7815] Cannot create hsr debugfs directory
[  220.379954][ T7805] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  220.434323][ T7805] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  220.473892][ T7805] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  220.524205][ T7802] 8021q: adding VLAN 0 to HW filter on device team0
[  220.553777][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.561666][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.570492][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.578919][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.591171][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.598243][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.624657][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.641958][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.650491][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.661454][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.668510][ T7811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.693968][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.713620][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.720591][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.746651][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.759872][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.769399][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  220.777598][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  220.786321][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.794954][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.802128][ T3110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.820834][ T7807] 8021q: adding VLAN 0 to HW filter on device team0
[  220.849839][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.857784][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.865554][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.889206][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.911923][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.920481][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.931695][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.938800][ T3110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.946934][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.955478][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.964380][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  220.973223][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.981736][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.988802][ T3110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.996768][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  221.005775][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  221.064122][ T7817] device hsr_slave_0 entered promiscuous mode
[  221.132122][ T7817] device hsr_slave_1 entered promiscuous mode
[  221.172008][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.179698][ T7817] Cannot create hsr debugfs directory
[  221.204310][ T7802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.215549][ T7802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.227668][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  221.237957][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.245914][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.254304][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.262878][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.271446][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.280289][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.288740][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.297156][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  221.308363][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  221.330645][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  221.339856][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  221.348335][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  221.357078][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  221.364853][ T3110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  221.388240][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  221.397100][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  221.421877][ T7815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  221.460676][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.468793][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  221.477623][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  221.489270][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.496705][ T7796] device veth0_vlan entered promiscuous mode
[  221.504845][ T7815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  221.577901][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.587254][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.595296][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.605313][ T7815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  221.644956][ T7815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  221.721635][ T7805] 8021q: adding VLAN 0 to HW filter on device team0
[  221.742783][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.751507][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.760009][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  221.768117][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.782103][ T7796] device veth1_vlan entered promiscuous mode
[  221.796621][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  221.806630][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.815311][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.824594][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  221.833403][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  221.841774][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.849267][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.857888][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  221.907878][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.916436][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.925405][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  221.934521][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  221.943100][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.950278][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.958476][ T7817] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.004165][ T7817] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.076531][ T7817] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.128975][ T7817] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.171891][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  222.180600][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  222.189829][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  222.198730][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  222.210726][ T7796] device veth0_macvtap entered promiscuous mode
[  222.221731][ T7796] device veth1_macvtap entered promiscuous mode
[  222.250637][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  222.259743][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  222.268163][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.275980][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.284112][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  222.292912][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  222.301288][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  222.309748][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  222.318735][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  222.342463][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.353314][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.362691][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  222.371051][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  222.379467][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.388029][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.396998][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.404996][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.422467][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.430197][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.446439][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.458211][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.471391][ T7815] 8021q: adding VLAN 0 to HW filter on device team0
[  222.480673][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  222.488933][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.497059][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  222.505813][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  222.514444][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  222.523386][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  222.534565][ T7802] device veth0_vlan entered promiscuous mode
[  222.542619][ T7805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.591024][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.599954][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.614980][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.622077][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.630187][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  222.638739][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  222.647107][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.654151][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.662479][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  222.671366][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  222.684193][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.691722][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.702312][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  222.724540][ T7802] device veth1_vlan entered promiscuous mode
[  222.742595][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  222.753859][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  222.762534][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  222.771140][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  222.779786][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  222.788701][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  222.797384][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  222.815370][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.842389][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  222.850864][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  222.859951][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.869033][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.877740][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  222.886109][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  222.894764][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  222.903077][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.914604][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.924643][ T7807] device veth0_vlan entered promiscuous mode
[  222.939675][ T7815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  222.950238][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.958035][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.982136][ T7807] device veth1_vlan entered promiscuous mode
[  223.003042][ T7802] device veth0_macvtap entered promiscuous mode
[  223.021976][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.031695][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.041549][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.050512][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.059401][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  223.067092][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.077013][ T7817] 8021q: adding VLAN 0 to HW filter on device team0
[  223.088256][ T7802] device veth1_macvtap entered promiscuous mode
[  223.102143][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  223.110379][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  223.118658][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.127487][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.135902][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.142934][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.150895][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.166801][ T7805] device veth0_vlan entered promiscuous mode
[  223.181628][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.195314][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.210485][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.219695][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.227592][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.235158][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.244026][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.252924][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.259941][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.269321][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.277300][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.299851][ T7805] device veth1_vlan entered promiscuous mode
[  223.320797][ T7807] device veth0_macvtap entered promiscuous mode
[  223.335192][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  223.343371][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.352360][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.360942][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.369946][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  223.378574][ T7802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  223.389171][ T7802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.400851][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.415892][ T7807] device veth1_macvtap entered promiscuous mode
[  223.426581][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  223.440673][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  223.449987][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.459378][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.468469][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  223.478109][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  223.487210][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  223.519638][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  223.528770][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  223.537830][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  223.546555][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  223.557192][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.565741][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  223.574398][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.584255][ T7802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  223.594788][ T7802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.605673][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.616395][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  223.629157][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  223.640006][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.650966][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  223.661715][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.673048][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.684319][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  223.694765][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.704642][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  223.715121][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.726108][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.734335][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  223.743855][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
20:47:40 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = gettid()
process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x31)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0xf80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

[  223.772699][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  223.781501][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.803864][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  223.832573][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  223.832598][ T7868] ptrace attach of "/root/syz-executor.0"[7867] was attempted by "/root/syz-executor.0"[7868]
20:47:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getstats={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xc}}, 0x1c}}, 0x0)

[  223.894588][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.902634][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.928516][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.937697][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.946733][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.955318][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.975748][ T7805] device veth0_macvtap entered promiscuous mode
[  223.988824][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.003422][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.025735][ T7805] device veth1_macvtap entered promiscuous mode
[  224.036451][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
20:47:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4)

[  224.052632][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.065837][ T7815] device veth0_vlan entered promiscuous mode
[  224.085608][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.105793][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.150182][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.161119][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.170983][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.181650][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.191996][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.203851][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.216255][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.229571][ T7815] device veth1_vlan entered promiscuous mode
20:47:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getstats={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x1c}}, 0x0)

[  224.254453][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.264045][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.273404][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.290600][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  224.310556][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.325234][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.335144][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.351108][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.361586][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.374323][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.385291][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.414062][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  224.424079][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  224.452866][ T7815] device veth0_macvtap entered promiscuous mode
20:47:41 executing program 0:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f0000000480)="69f54a930180e01d684f366ac66d9c9b4ca44258e65aae4155b20f26660e4943", 0x20)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

[  224.480286][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.499461][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.522545][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  224.531202][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  224.540475][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.569373][ T7815] device veth1_macvtap entered promiscuous mode
[  224.588845][ T7817] device veth0_vlan entered promiscuous mode
[  224.602215][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.610386][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
20:47:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0)

[  224.632577][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.670661][ T7817] device veth1_vlan entered promiscuous mode
[  224.679465][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.689297][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.706441][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.721355][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.742149][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.756254][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.766720][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.777314][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.787777][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.797837][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.808498][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.819541][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.836205][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.846892][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.855984][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
20:47:42 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b1170817de901ba2c7e83175e36c0d348be12a81d0d1eceb14f2857c35c8f98d8336d6ca1eba1cdf20ebe813cc0676238a001a0924a9f07222a04acc4830d79c36628b14dd9a170dc7794fb97ea7a55565d0929caf4d986666f8687e95c386d425e34cdebe2ef8e4e745f7a33983f0217dbb5c62e09da311bc390da85d3d5668fdcb55966c574794db905d66854d207aa0c4afccacb08823d2af84a12bc40b851dfca6fb1b07fc5a0000000057283b03640e2ee5dd29eb512433f7a55792c0538450f0bade4f363f03342e00a2f7f5bb32d57e2e359976af7c4e3d259c54b8b75e4d98f4d4e532e01379643bee0684c9c09718a04cdc93cd84c3e4055b2f968a1ae3e768bc66f04a08a01224af97d8ed5aa7c979302d14078aea410c58a8021ffaab915365b1f7baf2eef6a12232c3a7828e366710b46509b75b085643e9499663", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYPTR], 0x0, 0x168, 0x0, 0xfffffffc}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  224.876059][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.901449][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.917083][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.937559][ T7946] ptrace attach of "/root/syz-executor.0"[7945] was attempted by "/root/syz-executor.0"[7946]
[  224.954301][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.964178][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.976726][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.986839][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  224.997797][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.008942][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.038893][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.051183][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.071099][ T7817] device veth0_macvtap entered promiscuous mode
[  225.085730][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.094581][ T7811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
20:47:42 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101002, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

[  225.134285][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.164007][ T7817] device veth1_macvtap entered promiscuous mode
[  225.220775][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.249908][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.271967][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.285845][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.307152][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.317641][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.327950][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.338426][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.351531][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.364801][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.376075][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.388840][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.397734][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.407176][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.420137][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.431010][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.441035][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.451572][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.462685][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.473504][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.483381][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.494135][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.504191][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.514679][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.525539][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.535989][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.545911][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
20:47:42 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getstats={0x1c, 0x1e, 0x1}, 0x1c}}, 0x0)

20:47:42 executing program 0:
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x84}, 0x0)

20:47:43 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b63000009631040020000130000000000000000000000000e630c40"], 0x0, 0x0, 0x0})

20:47:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
r1 = getpid()
waitid(0x1, r1, 0x0, 0x8, 0x0)

20:47:43 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)=[@register_looper={0x630d}, @request_death], 0x0, 0x0, 0x0})

20:47:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r2, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20:47:43 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000780)=0x40000000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0)
dup2(r2, r0)

20:47:43 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESOCT, @ANYPTR], 0x0, 0x17b, 0x0, 0xfffffffc}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

20:47:43 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0)

20:47:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  226.091119][ T8027] ptrace attach of "/root/syz-executor.2"[8026] was attempted by "/root/syz-executor.2"[8027]
[  226.092866][ T8028] binder: 8020:8028 ioctl c018620b 200001c0 returned -14
20:47:43 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b1170817de901ba2c7e83175e36c0d348be12a81d0d1eceb14f285fc35c8f98d8336d6ca1eba1cdf20ebe813cc0676238a001a0924a9f07222a04acc4830d79c36628b14dd9a170dc7794fb97ea7a55565d0929caf4d986666f8687a95c386d425e34cdebe2ef8e4e745f7a33983f0217da85d3d5668fdcb55966c574794db905d66854d207aa0c4afccacb08823d2af84a12bc40b851dfca6fb1b07fc5a0000000057283b03640e2ee5dd29eb512433f7a55792c0538450f0bade4f363f03342e00a2d57e2e359976af7c4e3d25a531acbd421b0eee", @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYPTR64, @ANYRESOCT], 0x0, 0x10d}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

20:47:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e)
sendfile(r4, r3, 0x0, 0xa198)

20:47:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r2, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  226.264885][ T8043] ptrace attach of "/root/syz-executor.3"[8042] was attempted by "/root/syz-executor.3"[8043]
[  226.298338][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  226.298438][   T27] audit: type=1804 audit(1585255663.490:31): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir451101515/syzkaller.lU6rqb/3/bus" dev="sda1" ino=16537 res=1
20:47:43 executing program 3:
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x800)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:47:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)

20:47:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x20040840)
fchdir(0xffffffffffffffff)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  226.525809][   T27] audit: type=1804 audit(1585255663.700:32): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir451101515/syzkaller.lU6rqb/3/bus" dev="sda1" ino=16537 res=1
[  226.596207][ T8050] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[  226.605230][ T8050] FAT-fs (loop4): Filesystem has been set read-only
[  226.612379][ T8050] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17)
20:47:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=[@register_looper={0x40046302}], 0x0, 0x0, 0x0})

20:47:43 executing program 3:
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x800)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

[  226.714378][   T27] audit: type=1804 audit(1585255663.840:33): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir540632976/syzkaller.NRnHwk/3/bus" dev="sda1" ino=16541 res=1
[  226.743756][ T8066] binder: 8063:8066 ioctl 4018620d 0 returned -22
[  226.769826][   T27] audit: type=1804 audit(1585255663.840:34): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir540632976/syzkaller.NRnHwk/3/bus" dev="sda1" ino=16541 res=1
[  228.241815][    C0] sched: RT throttling activated
[  229.263708][   T27] audit: type=1804 audit(1585255663.840:35): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir540632976/syzkaller.NRnHwk/3/bus" dev="sda1" ino=16541 res=1
[  229.264465][ T8072] binder: BC_ACQUIRE_RESULT not supported
[  230.256442][ T8072] binder: 8071:8072 ioctl c0306201 200001c0 returned -22
20:47:47 executing program 1:
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x800)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:47:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1e)
sendfile(r4, r3, 0x0, 0xa198)

[  230.371502][   T27] audit: type=1804 audit(1585255663.990:36): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir119810643/syzkaller.r7IyvY/2/bus" dev="sda1" ino=16551 res=1
20:47:47 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

[  230.607890][   T27] audit: type=1804 audit(1585255664.040:37): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir119810643/syzkaller.r7IyvY/2/bus" dev="sda1" ino=16551 res=1
[  230.916829][ T8088] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[  230.925616][ T8088] FAT-fs (loop4): Filesystem has been set read-only
[  230.926747][ T8093] binder: 8087:8093 ioctl c018620c 200001c0 returned -22
[  230.932417][ T8088] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17)
[  230.942868][   T27] audit: type=1804 audit(1585255667.550:38): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir540632976/syzkaller.NRnHwk/4/bus" dev="sda1" ino=16527 res=1
[  231.087299][   T27] audit: type=1804 audit(1585255667.560:39): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir540632976/syzkaller.NRnHwk/4/bus" dev="sda1" ino=16527 res=1
[  231.115055][   T27] audit: type=1804 audit(1585255667.830:40): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir018500698/syzkaller.zO8tyK/5/bus" dev="sda1" ino=16549 res=1
20:47:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:47:48 executing program 1:

20:47:48 executing program 0:

20:47:48 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

20:47:48 executing program 4:

20:47:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x20040840)
fchdir(0xffffffffffffffff)
r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

20:47:49 executing program 1:

[  231.796166][ T8102] binder: 8101:8102 ioctl c018620c 200001c0 returned -22
20:47:49 executing program 0:

20:47:49 executing program 4:

20:47:49 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

20:47:49 executing program 1:

20:47:49 executing program 4:

[  232.059686][ T8111] binder: 8110:8111 ioctl c018620c 200001c0 returned -22
[  232.619424][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  232.619447][   T27] audit: type=1804 audit(1585255669.810:42): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir451101515/syzkaller.lU6rqb/4/bus" dev="sda1" ino=16538 res=1
[  233.789707][ T8123] ==================================================================
[  233.797873][ T8123] BUG: KCSAN: data-race in ext4_nonda_switch / percpu_counter_add_batch
[  233.806187][ T8123] 
[  233.808518][ T8123] write to 0xffff88821836d158 of 8 bytes by task 8126 on cpu 0:
[  233.816243][ T8123]  percpu_counter_add_batch+0xbc/0x140
[  233.826598][ T8123]  ext4_claim_free_clusters+0x64/0x80
[  233.831977][ T8123]  ext4_da_reserve_space+0xf8/0x270
[  233.837185][ T8123]  ext4_da_get_block_prep+0x87e/0xa50
[  233.842565][ T8123]  ext4_block_write_begin+0x336/0xbd0
[  233.848641][ T8123]  ext4_da_write_begin+0x220/0x860
[  233.853757][ T8123]  generic_perform_write+0x13a/0x320
[  233.859045][ T8123]  ext4_buffered_write_iter+0x14e/0x280
[  233.864597][ T8123]  ext4_file_write_iter+0xf4/0xd30
[  233.869710][ T8123]  do_iter_readv_writev+0x4a7/0x5d0
[  233.874917][ T8123]  do_iter_write+0x137/0x3a0
[  233.879512][ T8123]  vfs_iter_write+0x56/0x80
[  233.884024][ T8123]  iter_file_splice_write+0x530/0x830
[  233.889402][ T8123]  direct_splice_actor+0x97/0xb0
[  233.894340][ T8123]  splice_direct_to_actor+0x22f/0x540
[  233.899713][ T8123]  do_splice_direct+0x152/0x1d0
[  233.904566][ T8123]  do_sendfile+0x396/0x810
[  233.909032][ T8123]  __x64_sys_sendfile64+0x121/0x140
[  233.914235][ T8123]  do_syscall_64+0xc7/0x390
[  233.918745][ T8123]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  233.924628][ T8123] 
[  233.926958][ T8123] read to 0xffff88821836d158 of 8 bytes by task 8123 on cpu 1:
[  233.934507][ T8123]  ext4_nonda_switch+0x58/0x130
[  233.939363][ T8123]  ext4_da_write_begin+0xcc/0x860
[  233.944750][ T8123]  generic_perform_write+0x13a/0x320
[  233.950040][ T8123]  ext4_buffered_write_iter+0x14e/0x280
[  233.955589][ T8123]  ext4_file_write_iter+0xf4/0xd30
[  233.960698][ T8123]  do_iter_readv_writev+0x4a7/0x5d0
[  233.965906][ T8123]  do_iter_write+0x137/0x3a0
[  233.970503][ T8123]  vfs_iter_write+0x56/0x80
[  233.975007][ T8123]  iter_file_splice_write+0x530/0x830
[  233.980381][ T8123]  direct_splice_actor+0x97/0xb0
[  233.985323][ T8123]  splice_direct_to_actor+0x22f/0x540
[  233.990701][ T8123]  do_splice_direct+0x152/0x1d0
[  233.995551][ T8123]  do_sendfile+0x396/0x810
[  234.000576][ T8123]  __x64_sys_sendfile64+0x121/0x140
[  234.005926][ T8123]  do_syscall_64+0xc7/0x390
[  234.010465][ T8123]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.016349][ T8123] 
[  234.018670][ T8123] Reported by Kernel Concurrency Sanitizer on:
[  234.024829][ T8123] CPU: 1 PID: 8123 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0
[  234.033416][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  234.043466][ T8123] ==================================================================
[  234.051543][ T8123] Kernel panic - not syncing: panic_on_warn set ...
[  234.058142][ T8123] CPU: 1 PID: 8123 Comm: syz-executor.5 Not tainted 5.6.0-rc1-syzkaller #0
[  234.066723][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  234.076791][ T8123] Call Trace:
[  234.080092][ T8123]  dump_stack+0x11d/0x187
[  234.084448][ T8123]  panic+0x210/0x640
[  234.088355][ T8123]  ? vprintk_func+0x89/0x13a
[  234.093008][ T8123]  kcsan_report.cold+0xc/0xf
[  234.097629][ T8123]  kcsan_setup_watchpoint+0x3fb/0x440
[  234.103021][ T8123]  ext4_nonda_switch+0x58/0x130
[  234.107898][ T8123]  ext4_da_write_begin+0xcc/0x860
[  234.112945][ T8123]  generic_perform_write+0x13a/0x320
[  234.118251][ T8123]  ext4_buffered_write_iter+0x14e/0x280
[  234.123814][ T8123]  ext4_file_write_iter+0xf4/0xd30
[  234.128933][ T8123]  ? common_file_perm+0x1d1/0x490
[  234.133967][ T8123]  ? current_time+0x6d/0xc0
[  234.138501][ T8123]  do_iter_readv_writev+0x4a7/0x5d0
[  234.143718][ T8123]  do_iter_write+0x137/0x3a0
[  234.148321][ T8123]  ? __kmalloc+0x21c/0x640
[  234.152750][ T8123]  vfs_iter_write+0x56/0x80
[  234.157267][ T8123]  iter_file_splice_write+0x530/0x830
[  234.162667][ T8123]  ? page_cache_pipe_buf_release+0xf0/0xf0
[  234.168487][ T8123]  direct_splice_actor+0x97/0xb0
[  234.173431][ T8123]  splice_direct_to_actor+0x22f/0x540
[  234.178814][ T8123]  ? generic_pipe_buf_nosteal+0x20/0x20
[  234.184365][ T8123]  do_splice_direct+0x152/0x1d0
[  234.189226][ T8123]  do_sendfile+0x396/0x810
[  234.193683][ T8123]  __x64_sys_sendfile64+0x121/0x140
[  234.198895][ T8123]  do_syscall_64+0xc7/0x390
[  234.203416][ T8123]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  234.209306][ T8123] RIP: 0033:0x45c849
[  234.213214][ T8123] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  234.232821][ T8123] RSP: 002b:00007f830d947c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  234.241238][ T8123] RAX: ffffffffffffffda RBX: 00007f830d9486d4 RCX: 000000000045c849
[  234.249497][ T8123] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  234.257477][ T8123] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
[  234.265460][ T8123] R10: 00008400fffffffa R11: 0000000000000246 R12: 00000000ffffffff
[  234.273429][ T8123] R13: 00000000000008d4 R14: 00000000004cb786 R15: 000000000076bfac
[  234.282786][ T8123] Kernel Offset: disabled
[  234.287129][ T8123] Rebooting in 86400 seconds..