[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. 2020/05/13 21:15:44 fuzzer started 2020/05/13 21:15:45 dialing manager at 10.128.0.105:36659 2020/05/13 21:15:45 syscalls: 3055 2020/05/13 21:15:45 code coverage: enabled 2020/05/13 21:15:45 comparison tracing: enabled 2020/05/13 21:15:45 extra coverage: enabled 2020/05/13 21:15:45 setuid sandbox: enabled 2020/05/13 21:15:45 namespace sandbox: enabled 2020/05/13 21:15:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/05/13 21:15:45 fault injection: enabled 2020/05/13 21:15:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/13 21:15:45 net packet injection: enabled 2020/05/13 21:15:45 net device setup: enabled 2020/05/13 21:15:45 concurrency sanitizer: enabled 2020/05/13 21:15:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/13 21:15:45 USB emulation: enabled syzkaller login: [ 55.400707][ T8925] KCSAN: could not find function: '_find_next_bit' [ 57.005079][ T8925] KCSAN: could not find function: 'poll_schedule_timeout' 2020/05/13 21:15:52 adding functions to KCSAN blacklist: 'ktime_get_real_seconds' 'xas_clear_mark' 'pipe_double_lock' 'ext4_sync_file' '__delete_from_page_cache' '__inet_hash_connect' 'tick_nohz_next_event' 'd_instantiate_new' 'do_exit' 'iput' 'pcpu_alloc' 'audit_log_start' 'ext4_setattr' 'do_signal_stop' 'page_counter_charge' '__rb_rotate_set_parents' 'blk_mq_get_request' 'wg_packet_send_staged_packets' 'mod_timer' 'echo_char' 'ep_poll' 'ext4_mb_good_group' 'shmem_getpage_gfp' 'do_syslog' 'find_get_pages_range_tag' '_find_next_bit' 'tick_sched_do_timer' 'shmem_file_read_iter' 'xas_find_marked' 'generic_write_end' 'copy_process' 'ext4_mark_iloc_dirty' '__rb_insert_augmented' 'n_tty_receive_buf_common' 'generic_fillattr' 'complete_signal' 'poll_schedule_timeout' 'yama_ptracer_del' '__lru_cache_add' 'ext4_free_inodes_count' '__dev_queue_xmit' 'futex_wait_queue_me' '__bpf_lru_node_move_in' 'blk_mq_sched_dispatch_requests' 'run_timer_softirq' 'tick_nohz_idle_stop_tick' '__ext4_new_inode' 'fasync_remove_entry' 'do_nanosleep' '__add_to_page_cache_locked' 'wbt_issue' 'blk_mq_dispatch_rq_list' 'add_timer' 'kauditd_thread' '__x64_sys_ptrace' 21:19:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040), 0x52d) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) [ 268.398947][ T8930] IPVS: ftp: loaded support on port[0] = 21 [ 268.474808][ T8930] chnl_net:caif_netlink_parms(): no params data found 21:19:21 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp}}}}, 0x0) [ 268.523125][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.530285][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.538160][ T8930] device bridge_slave_0 entered promiscuous mode [ 268.546736][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.554021][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.562137][ T8930] device bridge_slave_1 entered promiscuous mode [ 268.591052][ T8930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.612043][ T8930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.660923][ T8930] team0: Port device team_slave_0 added [ 268.668341][ T8930] team0: Port device team_slave_1 added [ 268.710024][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.717000][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.744004][ T8930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.757378][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.760186][ T9076] IPVS: ftp: loaded support on port[0] = 21 [ 268.765365][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.797037][ T8930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 21:19:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) [ 268.922947][ T8930] device hsr_slave_0 entered promiscuous mode [ 268.970919][ T8930] device hsr_slave_1 entered promiscuous mode [ 269.048600][ T9110] IPVS: ftp: loaded support on port[0] = 21 21:19:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)) [ 269.157818][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 269.253747][ T8930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.293800][ T8930] netdevsim netdevsim0 netdevsim1: renamed from eth1 21:19:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[], 0x1) [ 269.416404][ T8930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.481899][ T9281] IPVS: ftp: loaded support on port[0] = 21 [ 269.497500][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 269.508704][ T8930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.618965][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.631267][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.639015][ T9076] device bridge_slave_0 entered promiscuous mode 21:19:22 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) [ 269.678453][ T9370] IPVS: ftp: loaded support on port[0] = 21 [ 269.691326][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.698449][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.714531][ T9076] device bridge_slave_1 entered promiscuous mode [ 269.775438][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.783442][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.791654][ T9110] device bridge_slave_0 entered promiscuous mode [ 269.820831][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.843152][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.882028][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.889073][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.899407][ T9110] device bridge_slave_1 entered promiscuous mode [ 269.918523][ T9281] chnl_net:caif_netlink_parms(): no params data found [ 269.935006][ T9076] team0: Port device team_slave_0 added [ 269.942831][ T9076] team0: Port device team_slave_1 added [ 269.978621][ T9489] IPVS: ftp: loaded support on port[0] = 21 [ 269.993212][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.001458][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.029706][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.043714][ T8930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.062473][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.072739][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.079673][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.107170][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.134572][ T9281] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.142339][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.150847][ T9281] device bridge_slave_0 entered promiscuous mode [ 270.165752][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.188012][ T9281] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.196256][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.204747][ T9281] device bridge_slave_1 entered promiscuous mode [ 270.221463][ T9110] team0: Port device team_slave_0 added [ 270.272314][ T9076] device hsr_slave_0 entered promiscuous mode [ 270.320042][ T9076] device hsr_slave_1 entered promiscuous mode [ 270.359823][ T9076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.367537][ T9076] Cannot create hsr debugfs directory [ 270.380609][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.388683][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.398718][ T9110] team0: Port device team_slave_1 added [ 270.418049][ T9370] chnl_net:caif_netlink_parms(): no params data found [ 270.439648][ T8930] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.462214][ T9281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.483249][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.491533][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.517931][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.533535][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.540770][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.567661][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.581819][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.591991][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.601013][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.608151][ T5295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.617222][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.626689][ T9281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.678534][ T9281] team0: Port device team_slave_0 added [ 270.710254][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.719124][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.728332][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.735818][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.744224][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.754030][ T9281] team0: Port device team_slave_1 added [ 270.766733][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 270.821829][ T9110] device hsr_slave_0 entered promiscuous mode [ 270.860032][ T9110] device hsr_slave_1 entered promiscuous mode [ 270.909731][ T9110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.917304][ T9110] Cannot create hsr debugfs directory [ 270.939017][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.947015][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.973173][ T9281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.986705][ T9281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.994343][ T9281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.020965][ T9281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.040511][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.049334][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.058412][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.067361][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.076265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.085029][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.093371][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.106848][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.115111][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.123026][ T9370] device bridge_slave_0 entered promiscuous mode [ 271.134264][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.141449][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.149918][ T9370] device bridge_slave_1 entered promiscuous mode [ 271.166116][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.221966][ T9281] device hsr_slave_0 entered promiscuous mode [ 271.260307][ T9281] device hsr_slave_1 entered promiscuous mode [ 271.299896][ T9281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.307584][ T9281] Cannot create hsr debugfs directory [ 271.327542][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.336074][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.348942][ T8930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.363353][ T9370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.376272][ T9370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.433060][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.440988][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.448977][ T9489] device bridge_slave_0 entered promiscuous mode [ 271.456259][ T9076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.482912][ T9076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.535626][ T9076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.592657][ T9076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.645116][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.652258][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.660049][ T9489] device bridge_slave_1 entered promiscuous mode [ 271.677586][ T9370] team0: Port device team_slave_0 added [ 271.695027][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.708735][ T9370] team0: Port device team_slave_1 added [ 271.729404][ T8930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.741401][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.753323][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.761198][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.788554][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.795925][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.823308][ T9370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.837955][ T9370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.845609][ T9370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.872498][ T9370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.906877][ T9489] team0: Port device team_slave_0 added [ 271.912748][ T9110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.972504][ T9110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.011823][ T9110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 272.052153][ T9110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.151732][ T9370] device hsr_slave_0 entered promiscuous mode [ 272.189873][ T9370] device hsr_slave_1 entered promiscuous mode [ 272.239633][ T9370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.247323][ T9370] Cannot create hsr debugfs directory [ 272.254465][ T9489] team0: Port device team_slave_1 added [ 272.294212][ T9281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.364666][ T9281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.410867][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.417894][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.444644][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.457956][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.465465][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.492181][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.503802][ T9281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.542845][ T9281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.661907][ T9489] device hsr_slave_0 entered promiscuous mode [ 272.709865][ T9489] device hsr_slave_1 entered promiscuous mode [ 272.769686][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.777262][ T9489] Cannot create hsr debugfs directory [ 272.854056][ T9370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.945252][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.956377][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.966159][ T9370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.023041][ T9370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.090880][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.111889][ T9370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.188334][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.197750][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.207808][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.216033][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.224783][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.234180][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.242883][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.255753][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.267175][ T8930] device veth0_vlan entered promiscuous mode [ 273.289470][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.303258][ T9489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.341689][ T9489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.429488][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.438131][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.448719][ T9358] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.455947][ T9358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.463974][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.471637][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.479234][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.487782][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.496323][ T9358] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.504105][ T9358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.512076][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.525035][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.532989][ T9489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.573953][ T9489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.623195][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.632975][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.652024][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.660853][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.696241][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.704816][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.713899][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.722726][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.731575][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.740808][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.749205][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.758032][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.767065][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.775786][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.782963][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.791130][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.799525][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.819192][ T9076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.830593][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.838842][ T8930] device veth1_vlan entered promiscuous mode [ 273.865307][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.873945][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.882917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.892279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.900889][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.909735][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.918014][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.925066][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.933157][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.942071][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.950841][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.959193][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.967749][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.974878][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.984240][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.999459][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.008320][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.017769][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.025113][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.033294][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.061458][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.072324][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.081471][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.094031][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.102985][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.113838][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.122204][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.133600][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.160393][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.167875][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.176050][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.185932][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.196567][ T9370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.205583][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.222313][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.229996][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.238182][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.251493][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.260359][ T9110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.273095][ T8930] device veth0_macvtap entered promiscuous mode [ 274.290565][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.299060][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.309714][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.318257][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.327464][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.335551][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.355765][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.363311][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.372086][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.380788][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.389065][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.398267][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.407455][ T8930] device veth1_macvtap entered promiscuous mode [ 274.418213][ T9281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.427603][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.436283][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.445756][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.459405][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.459763][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.476804][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.483864][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.493836][ T9370] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.515421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.523353][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.532314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.541061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.548069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.556076][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.565118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.572757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.597907][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.609884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.618533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.627388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.635084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.644010][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.652816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.661264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.668294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.676187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.685017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.693810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.701249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.732083][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.740270][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.749393][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.758315][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.767865][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.776674][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.785601][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.794549][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.803653][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.812595][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.835560][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.847527][ T8930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.856428][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.865232][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.873639][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.882758][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.891633][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.900265][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.908460][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.917459][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.926001][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.934994][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.943934][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.952580][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.961216][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.970464][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.978953][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.988047][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.999821][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.008085][ T9370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.020589][ T9076] device veth0_vlan entered promiscuous mode [ 275.030026][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.037868][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.053475][ T8930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.075767][ T9076] device veth1_vlan entered promiscuous mode [ 275.083771][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.093254][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.102247][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.111510][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.136100][ T9370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.158655][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.179560][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.187018][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.206689][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.215536][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.412633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.428105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.443584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.456964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.468567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.477155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.487413][ T9110] device veth0_vlan entered promiscuous mode [ 275.500180][ T9281] device veth0_vlan entered promiscuous mode [ 275.519100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.526888][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.542145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.556641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.578773][ T9110] device veth1_vlan entered promiscuous mode [ 275.611445][ T9281] device veth1_vlan entered promiscuous mode [ 275.635208][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.645530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.654059][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.665024][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.674323][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.684888][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.702357][ T9076] device veth0_macvtap entered promiscuous mode [ 275.719873][ T9076] device veth1_macvtap entered promiscuous mode [ 275.756726][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.765952][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.774379][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.782796][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.791203][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.800269][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.824293][ T9110] device veth0_macvtap entered promiscuous mode [ 275.835355][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 275.847038][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.858613][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.867773][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.876508][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.885119][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.893622][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.902368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.911318][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.920195][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.928402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.937376][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.945593][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.953659][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.964118][ T9281] device veth0_macvtap entered promiscuous mode [ 275.976856][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.988379][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.999681][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_1 21:19:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040), 0x52d) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) [ 276.016216][ T9489] device veth0_vlan entered promiscuous mode [ 276.025244][ T9110] device veth1_macvtap entered promiscuous mode [ 276.035903][ T9281] device veth1_macvtap entered promiscuous mode [ 276.049592][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.057827][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.071158][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.079390][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.088117][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.097755][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.106423][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.126683][ T9489] device veth1_vlan entered promiscuous mode [ 276.137225][ T9370] device veth0_vlan entered promiscuous mode [ 276.159166][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.166905][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.196402][ T9370] device veth1_vlan entered promiscuous mode [ 276.290758][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.302356][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.313154][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.324269][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.335839][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.348232][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.359359][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.369623][ T9281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.380989][ T9281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.392355][ T9281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.404155][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.415010][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.425591][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:19:29 executing program 0: [ 276.436479][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.446793][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 276.457535][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.468630][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 21:19:29 executing program 0: [ 276.529529][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.538566][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 21:19:29 executing program 1: [ 276.570174][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.578757][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:19:29 executing program 0: 21:19:29 executing program 1: [ 276.628111][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.650305][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 21:19:29 executing program 0: [ 276.681317][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.699615][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.719395][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 276.759303][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.791932][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 21:19:30 executing program 1: [ 276.818370][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.849678][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.941869][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.959520][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.968125][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.989736][ T5278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.012449][ T9370] device veth0_macvtap entered promiscuous mode [ 277.022846][ T9489] device veth0_macvtap entered promiscuous mode [ 277.099341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.107643][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.138296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.156550][ T9370] device veth1_macvtap entered promiscuous mode [ 277.179098][ T9489] device veth1_macvtap entered promiscuous mode [ 277.191016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.275035][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.290502][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.302815][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.313410][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.323363][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.333915][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.344084][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.354537][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.365642][ T9370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.379108][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.387797][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.462949][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.473886][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.484594][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.496236][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.506731][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.517744][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.528154][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.539566][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.551266][ T9370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.565669][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.579112][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.591337][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.602318][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.613262][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.624029][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.633953][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.644488][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.654555][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.665079][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.676878][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.750407][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.762624][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.781635][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.792134][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 21:19:31 executing program 2: 21:19:31 executing program 0: [ 277.821981][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.852860][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.866733][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.904488][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.931612][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.958782][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.968611][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 277.979844][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.990124][ T9489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.000910][ T9489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.013202][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.061407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.071447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:19:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 21:19:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:19:31 executing program 1: 21:19:31 executing program 3: 21:19:31 executing program 0: 21:19:31 executing program 2: 21:19:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:19:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 21:19:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="0f20e035000002000f22e00f2163c744240071000000c744240233000000ff1c24c443f908ed9b440f01c3c442d0f31366ba420066b847cd66efc744240004fa0000c744240200000000c7442406000000000f01142466b872000f00d065f30f09", 0x61}], 0x1, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:19:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x4f0, 0x110, 0x0, 0x220, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x64010102, @remote, 0x5}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:ppp_device_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xc) lseek(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x10001) socketpair(0x8000000000001e, 0x5, 0xd5, &(0x7f000000dff8)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003440)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='com.apple.system.Security\x00') io_setup(0x5, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) 21:19:31 executing program 3: [ 278.582705][T10274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 278.623509][T10277] x_tables: duplicate underflow at hook 1 21:19:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000d04000000000000000000060000", @ANYRES32=r5], 0x20}}, 0x0) 21:19:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001f00000000000004000a000a000100726f757465000000140002"], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) [ 278.702931][T10286] FAT-fs (loop0): bogus number of reserved sectors [ 278.715153][T10286] FAT-fs (loop0): Can't find a valid FAT filesystem [ 278.766312][T10277] x_tables: duplicate underflow at hook 1 [ 278.791155][T10293] FAT-fs (loop0): bogus number of reserved sectors [ 278.806942][T10293] FAT-fs (loop0): Can't find a valid FAT filesystem [ 278.833650][ C1] hrtimer: interrupt took 55529 ns 21:19:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x4f0, 0x110, 0x0, 0x220, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x64010102, @remote, 0x5}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:ppp_device_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xc) lseek(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x10001) socketpair(0x8000000000001e, 0x5, 0xd5, &(0x7f000000dff8)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003440)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='com.apple.system.Security\x00') io_setup(0x5, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) 21:19:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000400)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000000, 0x40000004}, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) 21:19:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x4f0, 0x110, 0x0, 0x220, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x64010102, @remote, 0x5}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:ppp_device_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x540) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xc) lseek(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x10001) socketpair(0x8000000000001e, 0x5, 0xd5, &(0x7f000000dff8)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003440)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='com.apple.system.Security\x00') io_setup(0x5, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 279.154325][T10307] x_tables: duplicate underflow at hook 1 [ 279.185534][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 21:19:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 279.206529][T10311] x_tables: duplicate underflow at hook 1 [ 279.214694][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.243441][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.265235][T10307] FAT-fs (loop0): bogus number of reserved sectors [ 279.272420][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.285849][T10311] FAT-fs (loop5): bogus number of reserved sectors [ 279.289062][T10307] FAT-fs (loop0): Can't find a valid FAT filesystem [ 279.294709][T10311] FAT-fs (loop5): Can't find a valid FAT filesystem 21:19:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001f00000000000004000a000a000100726f757465000000140002"], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="007400000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001701000004000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) 21:19:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="800000001010000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef27009a49fcc01057584bdac2914b09040000000000000083387b000000000000a234b4", 0x5d, 0x400}], 0x800001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 279.426611][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.455892][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:19:32 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) write$char_usb(r0, &(0x7f0000000200)="0e78002e2e76098b0300f7b3b9484c2133dfd6f44b1067fcc250fbea18cec05acba200adf4f83130d2c8acbb68e9b880d50eb58618427fc0e76c05a48947be", 0x3f) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x0, 0x3f}) [ 279.481855][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:19:32 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 21:19:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001f00000000000004000a000a000100726f757465000000140002"], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) [ 279.581948][T10335] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.597645][ T27] audit: type=1800 audit(1589404772.823:2): pid=10338 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15779 res=0 [ 279.614327][T10335] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 279.646731][T10335] EXT4-fs (loop2): bad geometry: block count 4112 exceeds size of device (1 blocks) [ 279.704850][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.718140][ T27] audit: type=1804 audit(1589404772.903:3): pid=10343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir380422578/syzkaller.2K1BYg/3/file0/bus" dev="ramfs" ino=37237 res=1 [ 279.749860][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:19:33 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x2) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 279.783058][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:19:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x3}}}}}}, 0x0) [ 279.826434][T10335] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.864343][T10335] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem 21:19:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 21:19:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_settings={0x80, 0x2, @raw_hdlc=&(0x7f0000000180)={0x1000, 0x8000}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) write$P9_RREMOVE(r5, &(0x7f00000000c0)={0x7}, 0x7) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x77b4, 0x9, 0x8001, 0x7]}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(r6, 0x2) [ 279.937622][T10335] EXT4-fs (loop2): bad geometry: block count 4112 exceeds size of device (1 blocks) [ 279.977614][T10365] llc_conn_state_process: llc_conn_service failed 21:19:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="001f00000000000004000a000a000100726f757465000000140002"], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 21:19:33 executing program 0: socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 21:19:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_settings={0x80, 0x2, @raw_hdlc=&(0x7f0000000180)={0x1000, 0x8000}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) write$P9_RREMOVE(r5, &(0x7f00000000c0)={0x7}, 0x7) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x77b4, 0x9, 0x8001, 0x7]}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, @link_local}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(r6, 0x2) accept4$llc(r6, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x10, 0x800) [ 280.037095][T10365] llc_conn_state_process: llc_conn_service failed 21:19:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) getpid() clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000000c0)=0x8) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 21:19:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000340)=""/48, 0x30}], 0x4}, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xffffffff}, 0x4) [ 280.203611][T10381] llc_conn_state_process: llc_conn_service failed 21:19:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:19:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0xa000, 0x0) read$usbmon(r0, &(0x7f0000000400)=""/243, 0xf3) 21:19:33 executing program 4: creat(&(0x7f0000000400)='./bus\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:19:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) getpid() clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x220080) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) gettid() 21:19:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "c1b191af80a715728331f89a64c00417"}, 0x11, 0x3) 21:19:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) getpid() clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x220080) exit(0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 280.749160][ T27] audit: type=1800 audit(1589404773.973:4): pid=10415 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=15772 res=0 [ 280.826081][ T27] audit: type=1804 audit(1589404774.003:5): pid=10415 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir151600256/syzkaller.I71Uk0/6/file0" dev="sda1" ino=15772 res=1 [ 281.025929][ T27] audit: type=1804 audit(1589404774.053:6): pid=10418 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir151600256/syzkaller.I71Uk0/6/file0" dev="sda1" ino=15772 res=1 [ 281.037404][T10420] llc_conn_state_process: llc_conn_service failed 21:19:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@void, @val={0x7, 0x0, 0x0, 0x0, 0x60}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @source_quench={0x8, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}}, 0xfdef) 21:19:34 executing program 2: r0 = socket(0x11, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x9}}) 21:19:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0xfffffec5}}], 0x1, 0x0, 0x0) getpid() clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x220080) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) gettid() [ 281.372846][T10418] ================================================================== [ 281.381037][T10418] BUG: KCSAN: data-race in atime_needs_update / generic_update_time [ 281.389078][T10418] [ 281.391428][T10418] write to 0xffff8880b69021e0 of 16 bytes by task 10415 on cpu 1: [ 281.399265][T10418] generic_update_time+0xc2/0x270 [ 281.404309][T10418] update_time+0x7d/0x90 [ 281.408679][T10418] file_update_time+0x205/0x2d0 [ 281.413593][T10418] file_modified+0x60/0x80 [ 281.418107][T10418] ext4_file_write_iter+0xad5/0xd30 [ 281.423341][T10418] do_iter_readv_writev+0x4a7/0x5d0 [ 281.428559][T10418] do_iter_write+0x137/0x3a0 [ 281.433340][T10418] vfs_iter_write+0x56/0x80 [ 281.437873][T10418] iter_file_splice_write+0x530/0x830 [ 281.443364][T10418] direct_splice_actor+0x97/0xb0 [ 281.448329][T10418] splice_direct_to_actor+0x22f/0x540 [ 281.454236][T10418] do_splice_direct+0x152/0x1d0 [ 281.459103][T10418] do_sendfile+0x380/0x800 [ 281.463530][T10418] __x64_sys_sendfile64+0x121/0x140 [ 281.468751][T10418] do_syscall_64+0xc7/0x3b0 [ 281.473263][T10418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.479155][T10418] [ 281.481502][T10418] read to 0xffff8880b69021e8 of 8 bytes by task 10418 on cpu 0: [ 281.489451][T10418] atime_needs_update+0x2a2/0x360 [ 281.494692][T10418] touch_atime+0x63/0x150 [ 281.499050][T10418] generic_file_splice_read+0x452/0x470 [ 281.504634][T10418] do_splice_to+0xc7/0x100 [ 281.509079][T10418] splice_direct_to_actor+0x1b9/0x540 [ 281.514471][T10418] do_splice_direct+0x152/0x1d0 [ 281.519424][T10418] do_sendfile+0x380/0x800 [ 281.523869][T10418] __x64_sys_sendfile64+0x121/0x140 [ 281.529125][T10418] do_syscall_64+0xc7/0x3b0 [ 281.533657][T10418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.538446][ T27] audit: type=1804 audit(1589404774.763:7): pid=10438 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir151600256/syzkaller.I71Uk0/6/file0" dev="sda1" ino=15772 res=1 [ 281.539641][T10418] [ 281.564821][T10418] Reported by Kernel Concurrency Sanitizer on: [ 281.570982][T10418] CPU: 0 PID: 10418 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 281.579654][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.589734][T10418] ================================================================== [ 281.597803][T10418] Kernel panic - not syncing: panic_on_warn set ... [ 281.604393][T10418] CPU: 0 PID: 10418 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 281.613061][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.623110][T10418] Call Trace: [ 281.626403][T10418] dump_stack+0x11d/0x187 [ 281.630744][T10418] panic+0x210/0x640 [ 281.634650][T10418] ? vprintk_func+0x89/0x13a [ 281.634960][ T27] audit: type=1804 audit(1589404774.763:8): pid=10419 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir151600256/syzkaller.I71Uk0/6/file0" dev="sda1" ino=15772 res=1 [ 281.639239][T10418] kcsan_report.cold+0xc/0x1a [ 281.639266][T10418] kcsan_setup_watchpoint+0x3fb/0x440 [ 281.639294][T10418] atime_needs_update+0x2a2/0x360 [ 281.639314][T10418] touch_atime+0x63/0x150 [ 281.639358][T10418] ? ext4_file_read_iter+0x110/0x360 [ 281.686283][T10418] generic_file_splice_read+0x452/0x470 [ 281.691844][T10418] ? add_to_pipe+0x1b0/0x1b0 [ 281.696450][T10418] do_splice_to+0xc7/0x100 [ 281.700921][T10418] splice_direct_to_actor+0x1b9/0x540 [ 281.706494][T10418] ? generic_pipe_buf_nosteal+0x20/0x20 [ 281.712146][T10418] do_splice_direct+0x152/0x1d0 [ 281.717003][T10418] do_sendfile+0x380/0x800 [ 281.721431][T10418] __x64_sys_sendfile64+0x121/0x140 [ 281.726650][T10418] do_syscall_64+0xc7/0x3b0 [ 281.731171][T10418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.737068][T10418] RIP: 0033:0x45c829 [ 281.740975][T10418] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.760581][T10418] RSP: 002b:00007fa362b52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 281.769175][T10418] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829 [ 281.777172][T10418] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 281.785519][T10418] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 281.793612][T10418] R10: 00000000ffffff38 R11: 0000000000000246 R12: 00000000ffffffff [ 281.801582][T10418] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007fa362b536d4 [ 281.811180][T10418] Kernel Offset: disabled [ 281.815645][T10418] Rebooting in 86400 seconds..