Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. 2020/04/21 17:59:10 fuzzer started 2020/04/21 17:59:12 dialing manager at 10.128.0.105:44139 2020/04/21 17:59:12 syscalls: 2960 2020/04/21 17:59:12 code coverage: enabled 2020/04/21 17:59:12 comparison tracing: enabled 2020/04/21 17:59:12 extra coverage: enabled 2020/04/21 17:59:12 setuid sandbox: enabled 2020/04/21 17:59:12 namespace sandbox: enabled 2020/04/21 17:59:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/21 17:59:12 fault injection: enabled 2020/04/21 17:59:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/21 17:59:12 net packet injection: enabled 2020/04/21 17:59:12 net device setup: enabled 2020/04/21 17:59:12 concurrency sanitizer: enabled 2020/04/21 17:59:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/21 17:59:12 USB emulation: /dev/raw-gadget does not exist syzkaller login: [ 46.719499][ T6720] KCSAN: could not find function: '_find_next_bit' [ 47.775297][ T6720] KCSAN: could not find function: 'poll_schedule_timeout' 2020/04/21 17:59:16 adding functions to KCSAN blacklist: 'xas_clear_mark' 'tick_sched_do_timer' 'generic_fillattr' '__ext4_new_inode' 'do_nanosleep' 'fsnotify' 'blk_mq_dispatch_rq_list' 'generic_update_time' 'wbt_done' 'generic_write_end' '__add_to_page_cache_locked' 'get_cpu_idle_time_us' 'pcpu_alloc' 'audit_log_start' 'tick_nohz_idle_stop_tick' 'run_timer_softirq' '_find_next_bit' 'ext4_writepages' 'find_get_pages_range_tag' 'echo_char' 'add_timer' 'blk_mq_sched_dispatch_requests' 'ext4_mark_iloc_dirty' 'poll_schedule_timeout' 'ext4_free_inodes_count' 'page_counter_charge' 'copy_process' 'kauditd_thread' 'do_exit' '__filemap_fdatawrite_range' 'alloc_pid' 'blk_mq_get_request' 'atime_needs_update' 'ktime_get_real_seconds' 'xas_find_marked' 'generic_file_read_iter' 'wbt_issue' 'ep_poll' 'mod_timer' 18:02:29 executing program 0: [ 241.680543][ T6724] IPVS: ftp: loaded support on port[0] = 21 18:02:29 executing program 1: [ 241.765207][ T6724] chnl_net:caif_netlink_parms(): no params data found [ 241.870843][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.878895][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.887433][ T6724] device bridge_slave_0 entered promiscuous mode [ 241.896054][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.903184][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.912546][ T6724] device bridge_slave_1 entered promiscuous mode [ 241.933232][ T6724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.944370][ T6724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.969044][ T6724] team0: Port device team_slave_0 added [ 241.986250][ T6724] team0: Port device team_slave_1 added [ 242.011184][ T6864] IPVS: ftp: loaded support on port[0] = 21 [ 242.018887][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.029713][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.057342][ T6724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 18:02:29 executing program 2: [ 242.082716][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.089744][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.117443][ T6724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.207202][ T6724] device hsr_slave_0 entered promiscuous mode [ 242.245493][ T6724] device hsr_slave_1 entered promiscuous mode 18:02:30 executing program 3: [ 242.363374][ T6906] IPVS: ftp: loaded support on port[0] = 21 [ 242.478426][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 242.599497][ T6724] netdevsim netdevsim0 netdevsim0: renamed from eth0 18:02:30 executing program 4: [ 242.688876][ T6724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.778354][ T7136] IPVS: ftp: loaded support on port[0] = 21 [ 242.789014][ T6724] netdevsim netdevsim0 netdevsim2: renamed from eth2 18:02:30 executing program 5: [ 242.857321][ T6724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.876862][ T6906] chnl_net:caif_netlink_parms(): no params data found [ 242.901621][ T7143] IPVS: ftp: loaded support on port[0] = 21 [ 242.934450][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.946978][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.954935][ T6864] device bridge_slave_0 entered promiscuous mode [ 243.002588][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.011633][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.019975][ T6864] device bridge_slave_1 entered promiscuous mode [ 243.068146][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.091505][ T7197] IPVS: ftp: loaded support on port[0] = 21 [ 243.098486][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.154337][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.161582][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.169509][ T6906] device bridge_slave_0 entered promiscuous mode [ 243.197141][ T7136] chnl_net:caif_netlink_parms(): no params data found [ 243.216598][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.223704][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.232874][ T6906] device bridge_slave_1 entered promiscuous mode [ 243.243985][ T6864] team0: Port device team_slave_0 added [ 243.270497][ T6864] team0: Port device team_slave_1 added [ 243.278333][ T7143] chnl_net:caif_netlink_parms(): no params data found [ 243.304928][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.331887][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.367843][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.374907][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.401377][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.413839][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.421203][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.447239][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.470239][ T6906] team0: Port device team_slave_0 added [ 243.479044][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.527149][ T6864] device hsr_slave_0 entered promiscuous mode [ 243.566809][ T6864] device hsr_slave_1 entered promiscuous mode [ 243.605169][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.612737][ T6864] Cannot create hsr debugfs directory [ 243.619527][ T6906] team0: Port device team_slave_1 added [ 243.638307][ T7136] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.645708][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.653506][ T7136] device bridge_slave_0 entered promiscuous mode [ 243.662000][ T7136] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.671235][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.679053][ T7136] device bridge_slave_1 entered promiscuous mode [ 243.729963][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.740353][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.767443][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.784840][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.794372][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.820712][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.839572][ T7136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.852692][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 243.876956][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.884588][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.898451][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.908440][ T7136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.924511][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.932970][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.941222][ T7143] device bridge_slave_0 entered promiscuous mode [ 243.965499][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.972631][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.981323][ T7143] device bridge_slave_1 entered promiscuous mode [ 244.000410][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.010652][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.019217][ T2691] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.026372][ T2691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.034089][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.043024][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.051439][ T2691] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.058569][ T2691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.072492][ T7136] team0: Port device team_slave_0 added [ 244.087214][ T7136] team0: Port device team_slave_1 added [ 244.137614][ T6906] device hsr_slave_0 entered promiscuous mode [ 244.175449][ T6906] device hsr_slave_1 entered promiscuous mode [ 244.215078][ T6906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.222711][ T6906] Cannot create hsr debugfs directory [ 244.238132][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.247822][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.260210][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.299248][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.308322][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.317749][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.332295][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.365588][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.373797][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.382878][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.391949][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.399932][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.426477][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.442377][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.450362][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.458767][ T7197] device bridge_slave_0 entered promiscuous mode [ 244.468582][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.476380][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.484106][ T7197] device bridge_slave_1 entered promiscuous mode [ 244.502159][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.518769][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.548088][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.560301][ T7143] team0: Port device team_slave_0 added [ 244.566290][ T6864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.609565][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.620455][ T7143] team0: Port device team_slave_1 added [ 244.627557][ T6864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.668901][ T6864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.718151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.727842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.737923][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.758007][ T6906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.797341][ T6864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.861368][ T6906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.907344][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.914344][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.942681][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.958785][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.965795][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.992746][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.047201][ T7136] device hsr_slave_0 entered promiscuous mode [ 245.085283][ T7136] device hsr_slave_1 entered promiscuous mode [ 245.135003][ T7136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.142726][ T7136] Cannot create hsr debugfs directory [ 245.159159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.169510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.178718][ T6906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.207430][ T7197] team0: Port device team_slave_0 added [ 245.229612][ T6724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.248911][ T7197] team0: Port device team_slave_1 added [ 245.254733][ T6906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.347225][ T7143] device hsr_slave_0 entered promiscuous mode [ 245.395213][ T7143] device hsr_slave_1 entered promiscuous mode [ 245.455037][ T7143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.462799][ T7143] Cannot create hsr debugfs directory [ 245.534234][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.542519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.550625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.561408][ T7136] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.597617][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.604621][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.630896][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.654995][ T7136] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.690867][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.698008][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.726148][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.759008][ T7136] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.839164][ T7136] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.910214][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.920853][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.981287][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.989898][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.999798][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.007939][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.024408][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.032384][ T6724] device veth0_vlan entered promiscuous mode [ 246.043008][ T7143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.069538][ T7143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.177089][ T7197] device hsr_slave_0 entered promiscuous mode [ 246.235647][ T7197] device hsr_slave_1 entered promiscuous mode [ 246.294914][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.302484][ T7197] Cannot create hsr debugfs directory [ 246.325175][ T7143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.400384][ T7143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.454548][ T6724] device veth1_vlan entered promiscuous mode [ 246.483543][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.504899][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.512564][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.525802][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.549042][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.558937][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.569351][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.576416][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.610652][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.619720][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.627961][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.636611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.645124][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.653907][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.662650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.671616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.680111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.693438][ T6724] device veth0_macvtap entered promiscuous mode [ 246.712636][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.741601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.749740][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.759637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.767829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.775910][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.784212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.792938][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.801111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.812371][ T6724] device veth1_macvtap entered promiscuous mode [ 246.823432][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.835519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.843520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.853936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.862948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.898660][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.909247][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.919817][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.928834][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.935894][ T7315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.946692][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.955168][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.963307][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.971984][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.980403][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.987458][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.995797][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.004036][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.012259][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.021175][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.030247][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.038872][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.045944][ T7315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.053747][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.062611][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.071022][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.078104][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.086093][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.094759][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.104879][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.112879][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.129881][ T7197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.147923][ T7197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.207613][ T7197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.280242][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.287911][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.297637][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.306916][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.316210][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.325517][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.344739][ T7197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.378159][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.395550][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.405689][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.414307][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.423572][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.432648][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.441892][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.450939][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.459978][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.468615][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.477536][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.487671][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.510870][ T6906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.525114][ T6906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.539777][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.547305][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.557126][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.565724][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.579741][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.614106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.622758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.630653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.639547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.648697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.657488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.670166][ T7136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.681851][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.697165][ T7143] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.708482][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.718684][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.730251][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.739293][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.775255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.783679][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.815953][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.823412][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.833654][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.842890][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.851371][ T2635] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.858526][ T2635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.867023][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.881272][ T6864] device veth0_vlan entered promiscuous mode [ 247.892723][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.905263][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.913594][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.925118][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.933748][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.942539][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.949636][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.957774][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.965901][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.986191][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.000265][ T6864] device veth1_vlan entered promiscuous mode [ 248.012017][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.021410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.030619][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.040361][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.054953][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.095726][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.103780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.113745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.121778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.130569][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.139262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.148262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.157281][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.166006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.174738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.183296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.192075][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.201134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.209807][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.217025][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.225363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.233561][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.262210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.271835][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.280754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.289597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.298267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.307205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.316058][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.323087][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.341543][ T6906] device veth0_vlan entered promiscuous mode [ 248.357528][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.370542][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.380889][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.392692][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.409149][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.418850][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.430779][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.439757][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 18:02:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) [ 248.457387][ T6864] device veth0_macvtap entered promiscuous mode [ 248.498851][ T7136] device veth0_vlan entered promiscuous mode [ 248.528468][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.538444][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.548221][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.557389][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.566090][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.573880][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.584135][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.595495][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.618220][ T6906] device veth1_vlan entered promiscuous mode [ 248.649432][ T7136] device veth1_vlan entered promiscuous mode [ 248.667379][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.688721][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 18:02:36 executing program 0: [ 248.710451][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.735628][ T6864] device veth1_macvtap entered promiscuous mode [ 248.784741][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.799199][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 18:02:36 executing program 0: [ 248.825252][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.834406][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.844338][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.852597][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:02:36 executing program 0: [ 248.876413][ T7197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.893776][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.932848][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 248.960969][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 18:02:36 executing program 0: [ 248.989412][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.015814][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.027836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.045214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.065391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.077260][ T7136] device veth0_macvtap entered promiscuous mode 18:02:36 executing program 0: [ 249.094077][ T6906] device veth0_macvtap entered promiscuous mode [ 249.107828][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.131775][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.146260][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.160426][ T7136] device veth1_macvtap entered promiscuous mode [ 249.177557][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.186939][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 18:02:37 executing program 0: [ 249.198893][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.207768][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.219253][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.228203][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.242013][ T6906] device veth1_macvtap entered promiscuous mode [ 249.272615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.282375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.297894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.305626][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.323352][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.356451][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.371744][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.382630][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.393317][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.411059][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.422549][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.434250][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.448111][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.463428][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.473374][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 249.484021][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.495765][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.506556][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.517861][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.532529][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.541223][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.553923][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.566699][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.577357][ T7136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.588227][ T7136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.599759][ T7136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.619506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.632240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.642000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.653060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.662218][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.672906][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.683395][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.693899][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.704106][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 249.715039][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.727600][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.755647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.775233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.784063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.792933][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.813743][ T7143] device veth0_vlan entered promiscuous mode [ 249.831212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.840986][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.866187][ T7143] device veth1_vlan entered promiscuous mode [ 249.878354][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 249.887317][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.903385][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.929523][ T7197] device veth0_vlan entered promiscuous mode [ 249.945446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 249.953635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.970875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.981065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.989673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.006502][ T7197] device veth1_vlan entered promiscuous mode [ 250.023763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.039189][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.054483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.063156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.075258][ T7143] device veth0_macvtap entered promiscuous mode [ 250.107650][ T7143] device veth1_macvtap entered promiscuous mode [ 250.122116][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.131360][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.143135][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.152702][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.170020][ T7197] device veth0_macvtap entered promiscuous mode [ 250.198590][ T7197] device veth1_macvtap entered promiscuous mode [ 250.228465][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 18:02:38 executing program 1: [ 250.248441][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.279387][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.315265][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.334423][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.354369][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.364237][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.388200][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.416169][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.445969][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.454055][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.469234][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.485870][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.498010][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.510392][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.521203][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.532264][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.557771][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.568954][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.579482][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.590745][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.602154][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.610100][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.620960][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.631252][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.642405][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.652323][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.662901][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.672786][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.683382][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.693245][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 250.703927][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.715412][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.732761][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.747478][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.768020][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.784208][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.807878][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.829255][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.842131][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.852725][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.865516][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.878265][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.889751][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.901960][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.913139][ T7197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 250.926983][ T7197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.939154][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.953201][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.962678][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:02:38 executing program 2: 18:02:38 executing program 0: 18:02:39 executing program 4: 18:02:39 executing program 5: 18:02:39 executing program 1: 18:02:39 executing program 3: 18:02:39 executing program 2: 18:02:39 executing program 0: 18:02:39 executing program 4: 18:02:39 executing program 2: 18:02:39 executing program 1: 18:02:39 executing program 4: 18:02:39 executing program 0: 18:02:39 executing program 3: 18:02:39 executing program 5: 18:02:39 executing program 2: 18:02:39 executing program 4: 18:02:39 executing program 1: 18:02:39 executing program 0: 18:02:39 executing program 3: 18:02:39 executing program 5: 18:02:39 executing program 2: 18:02:39 executing program 1: 18:02:39 executing program 0: 18:02:39 executing program 4: 18:02:39 executing program 3: 18:02:39 executing program 5: 18:02:39 executing program 2: 18:02:39 executing program 1: 18:02:39 executing program 0: 18:02:39 executing program 3: 18:02:39 executing program 5: 18:02:39 executing program 4: 18:02:40 executing program 1: 18:02:40 executing program 0: 18:02:40 executing program 2: 18:02:40 executing program 3: 18:02:40 executing program 1: 18:02:40 executing program 5: 18:02:40 executing program 4: 18:02:40 executing program 2: 18:02:40 executing program 0: 18:02:40 executing program 3: 18:02:40 executing program 5: 18:02:40 executing program 1: 18:02:40 executing program 4: 18:02:40 executing program 0: 18:02:40 executing program 2: 18:02:40 executing program 3: 18:02:40 executing program 1: 18:02:40 executing program 5: 18:02:40 executing program 0: 18:02:40 executing program 4: 18:02:40 executing program 2: 18:02:40 executing program 3: 18:02:40 executing program 1: 18:02:40 executing program 5: 18:02:40 executing program 0: 18:02:40 executing program 4: 18:02:40 executing program 2: 18:02:40 executing program 3: 18:02:40 executing program 1: 18:02:40 executing program 4: 18:02:40 executing program 0: 18:02:40 executing program 5: 18:02:40 executing program 2: 18:02:40 executing program 3: 18:02:40 executing program 0: 18:02:40 executing program 1: 18:02:41 executing program 4: 18:02:41 executing program 5: 18:02:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6a, &(0x7f0000000340)="f71559c80aa4cefd3b79e76a039acbd61c34f13ff7703cc78e407bfe020d0009eb2bc10f90a8b9a61d6d2fc9b7096ef2cb0200000000000000580b9976619a3718697b57c36753d0df4aaa013b48d37e1392267196e71eefa753750e2aad057cda6bb2eb9bc4be6756b1"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:02:41 executing program 3: 18:02:41 executing program 0: 18:02:41 executing program 4: 18:02:41 executing program 5: 18:02:41 executing program 1: 18:02:41 executing program 0: 18:02:41 executing program 3: 18:02:41 executing program 4: 18:02:41 executing program 5: 18:02:41 executing program 1: 18:02:41 executing program 0: 18:02:44 executing program 2: 18:02:44 executing program 4: 18:02:44 executing program 3: 18:02:44 executing program 5: 18:02:44 executing program 1: 18:02:44 executing program 0: 18:02:44 executing program 1: 18:02:44 executing program 5: 18:02:44 executing program 0: 18:02:44 executing program 4: 18:02:44 executing program 3: 18:02:44 executing program 2: 18:02:44 executing program 5: 18:02:44 executing program 0: 18:02:44 executing program 1: 18:02:44 executing program 4: 18:02:44 executing program 3: 18:02:44 executing program 2: 18:02:44 executing program 1: 18:02:44 executing program 0: 18:02:44 executing program 5: 18:02:44 executing program 3: 18:02:44 executing program 4: 18:02:44 executing program 2: 18:02:44 executing program 0: 18:02:44 executing program 1: 18:02:44 executing program 3: 18:02:44 executing program 5: 18:02:44 executing program 4: 18:02:44 executing program 2: 18:02:44 executing program 0: 18:02:44 executing program 1: 18:02:44 executing program 3: 18:02:44 executing program 5: 18:02:44 executing program 4: 18:02:44 executing program 2: 18:02:45 executing program 1: 18:02:45 executing program 0: 18:02:45 executing program 5: 18:02:45 executing program 2: 18:02:45 executing program 3: 18:02:45 executing program 4: 18:02:45 executing program 0: 18:02:45 executing program 1: 18:02:45 executing program 5: 18:02:45 executing program 4: 18:02:45 executing program 2: 18:02:45 executing program 3: 18:02:45 executing program 1: 18:02:45 executing program 5: 18:02:45 executing program 0: 18:02:45 executing program 2: 18:02:45 executing program 4: 18:02:45 executing program 3: 18:02:45 executing program 1: 18:02:45 executing program 0: 18:02:45 executing program 5: 18:02:45 executing program 2: 18:02:45 executing program 4: 18:02:45 executing program 3: 18:02:45 executing program 1: 18:02:45 executing program 0: 18:02:45 executing program 5: 18:02:45 executing program 4: 18:02:45 executing program 3: 18:02:45 executing program 2: 18:02:45 executing program 1: 18:02:45 executing program 0: 18:02:45 executing program 5: 18:02:46 executing program 2: 18:02:46 executing program 4: 18:02:46 executing program 3: 18:02:46 executing program 1: 18:02:46 executing program 0: 18:02:46 executing program 5: 18:02:46 executing program 2: 18:02:46 executing program 3: 18:02:46 executing program 4: 18:02:46 executing program 1: 18:02:46 executing program 5: 18:02:46 executing program 3: 18:02:46 executing program 0: 18:02:46 executing program 4: 18:02:46 executing program 2: 18:02:46 executing program 5: 18:02:46 executing program 1: 18:02:46 executing program 0: 18:02:46 executing program 4: 18:02:46 executing program 3: 18:02:46 executing program 2: 18:02:46 executing program 1: 18:02:46 executing program 5: 18:02:46 executing program 0: 18:02:46 executing program 2: 18:02:46 executing program 3: 18:02:46 executing program 4: 18:02:46 executing program 1: 18:02:46 executing program 5: 18:02:46 executing program 0: 18:02:46 executing program 2: 18:02:46 executing program 4: 18:02:46 executing program 3: 18:02:46 executing program 1: 18:02:47 executing program 5: 18:02:47 executing program 3: 18:02:47 executing program 0: 18:02:47 executing program 2: 18:02:47 executing program 5: 18:02:47 executing program 4: 18:02:47 executing program 1: 18:02:47 executing program 0: 18:02:47 executing program 3: 18:02:47 executing program 4: 18:02:47 executing program 2: 18:02:47 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hfsplus\x00', 0x0, 0x0) 18:02:47 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) 18:02:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 259.696073][ T8349] xt_hashlimit: max too large, truncated to 1048576 [ 259.703406][ T8350] xt_hashlimit: max too large, truncated to 1048576 [ 259.711761][ T8350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.711938][ T2517] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 259.727997][ T8349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.737831][ T8346] hfsplus: unable to find HFS+ superblock 18:02:47 executing program 4: 18:02:47 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0xf, 0x0, 0x0, 0x0, 0x0, "9f3e5f0b00"}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0xd3, @time={0xfffffffc}}) 18:02:47 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000001803000058010000800200000000000058010000000000004802000050030000500300004802000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000280158010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000200000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c65723100000000000000000000000000000400000000000000ffff1f0005010000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000a800f00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 259.744799][ T8351] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 259.803324][ T2516] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 259.817177][ T8362] hfsplus: unable to find HFS+ superblock [ 259.822171][ T8351] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 18:02:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 259.912318][ T8370] xt_hashlimit: max too large, truncated to 1048576 [ 259.948120][ T8370] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:48 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) 18:02:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth0_macvtap\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffe, 0x8060, 0x0, 0x0) 18:02:48 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hfsplus\x00', 0x0, 0x0) 18:02:48 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 260.299771][ T8380] xt_hashlimit: max too large, truncated to 1048576 [ 260.317386][ T8380] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:48 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, {0x11, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 260.357053][ T2517] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 260.371742][ T8384] hfsplus: unable to find HFS+ superblock [ 260.386244][ T8386] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 18:02:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001140)={0x68, 0x0, &(0x7f00008feff0)={&(0x7f0000001180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 260.472564][ T8391] xt_hashlimit: max too large, truncated to 1048576 [ 260.481997][ T8391] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:48 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1410c2, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000280)="a933fb23", 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a494da8c5962cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b767950080000000000000c101013c5911039e15775027ecce66fd792bbf0e5bf5ff1b3bde3cd09a29a7f70000000200000049740000000000000006ad8e5ec4326d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x8379, 0x0, 0x0, 0x3}]}, 0x8) sendfile(r1, r4, 0x0, 0xffffffff010) 18:02:48 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 260.780925][ T26] audit: type=1804 audit(1587492168.573:2): pid=8410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir216824190/syzkaller.ywUB1H/36/bus" dev="sda1" ino=15842 res=1 [ 260.843897][ T26] audit: type=1804 audit(1587492168.603:3): pid=8410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir216824190/syzkaller.ywUB1H/36/bus" dev="sda1" ino=15842 res=1 [ 260.903966][ T26] audit: type=1804 audit(1587492168.603:4): pid=8410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir216824190/syzkaller.ywUB1H/36/bus" dev="sda1" ino=15842 res=1 [ 260.947998][ T26] audit: type=1804 audit(1587492168.683:5): pid=8412 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir216824190/syzkaller.ywUB1H/36/bus" dev="sda1" ino=15842 res=1 [ 260.971704][ T26] audit: type=1804 audit(1587492168.683:6): pid=8410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir216824190/syzkaller.ywUB1H/36/bus" dev="sda1" ino=15842 res=1 18:02:52 executing program 2: clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x23, 0x0, 0x3f) 18:02:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) 18:02:52 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) 18:02:52 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40001, 0x0) 18:02:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x102000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:52 executing program 1: clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 265.137393][ T8433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 265.162598][ T8428] x_tables: duplicate underflow at hook 2 [ 265.181818][ T8428] x_tables: duplicate underflow at hook 2 [ 265.198706][ T8436] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 18:02:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000001803000058010000800200000000000058010000000000004802000050030000500300004802000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000280158010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000200000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c65723100000000000000000000000000000400000000000000ffff1f0005010000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000a800f00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 18:02:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:02:53 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x9}}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000002780)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) 18:02:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:53 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 18:02:53 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40001, 0x0) [ 265.481148][ T8461] xt_hashlimit: max too large, truncated to 1048576 [ 265.507657][ T8461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.530794][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 18:02:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 265.573765][ T8458] debugfs: Directory 'vcpu0' with parent '8458-4' already present! [ 265.651577][ T8473] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities 18:02:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) [ 265.722605][ T8480] xt_hashlimit: max too large, truncated to 1048576 [ 265.752485][ T8480] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) 18:02:53 executing program 3: mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x8}, &(0x7f0000000100), 0x0, 0x0, 0x0) [ 265.932649][ T8486] xt_hashlimit: max too large, truncated to 1048576 [ 265.960538][ T8486] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:53 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9002000000000000010000000000000007000000000800"/124, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0) 18:02:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:53 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000001803000058010000800200000000000058010000000000004802000050030000500300004802000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000280158010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000200000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c65723100000000000000000000000000000400000000000000ffff1f0005010000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000a800f00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 18:02:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) [ 266.226270][ T8501] xt_hashlimit: max too large, truncated to 1048576 [ 266.236218][ T8501] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbc}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20e28180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) sysfs$3(0x3) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB]) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1820", @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x80000006, 0x2}, 0x10}, 0x78) 18:02:54 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9002000000000000010000000000000007000000000800"/124, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e78100000000000066642f3400a724bf056cb809d006ae0886246456924d25fd29306d365a05aea70d4d0870a6518731429733fe0512f3d43936f91a4d36b27cc505bce73167e43c26d2d867b6a255ae9a1746a57869e85fa852966499f65f45d08f3ca83430d684d017af5027dc7b089400592b184e5cc91f07f9581235b9d6bf1a345610a65571ce4eeba84db23fdafbb19d9c134fabdec0748c2229057e0fb8f3f664beadee22aa9105cb39411a8d269e81cf9e5776548abf6c8a8325ec94fd90ebb3a3a89090dbc258f438d1834575e563d7b77165abaeef2a9e95dea08934724d5cc43fb7cf6fdbbe52c5bcb334be7df76e2f347dbc2e74941c25cb93ea22416128"], 0x1a0) [ 266.471120][ C1] hrtimer: interrupt took 18430 ns 18:02:58 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 18:02:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:58 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) 18:02:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3e1}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)) 18:02:58 executing program 5: mkdir(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$chown(0x4, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200004d1e, 0x800007c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0/../file0\x00', 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:02:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x40) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 270.895127][ T8548] NFS: Device name not specified [ 270.904703][ T8546] xt_hashlimit: max too large, truncated to 1048576 [ 270.941190][ T8546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.977066][ T8548] NFS: Device name not specified 18:02:58 executing program 5: mkdir(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$chown(0x4, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200004d1e, 0x800007c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0/../file0\x00', 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:02:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa}, [@IFLA_PROTO_DOWN={0x5, 0xa}]}, 0x28}}, 0x0) 18:02:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x1}) 18:02:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="25bca274769e620a2734fa0095e0612687ecb86a548802a902ee0000000000804e2f989d79090000000000002d7ae73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_err_abort='data_err=abort'}]}) 18:02:58 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 271.231425][ T8572] NFS: Device name not specified [ 271.255802][ T8581] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 271.279026][ T8583] xt_hashlimit: max too large, truncated to 1048576 [ 271.289202][ T8583] xt_CT: You must specify a L4 protocol and not use inversions on it 18:02:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x1cd80100, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 273.655528][ T8564] ================================================================== [ 273.663836][ T8564] BUG: KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue [ 273.672094][ T8564] [ 273.674418][ T8564] write to 0xffff8881227798a4 of 1 bytes by interrupt on cpu 0: [ 273.682041][ T8564] snd_seq_control_queue+0x15a/0x320 [ 273.687321][ T8564] event_input_timer+0x29/0x40 [ 273.692069][ T8564] snd_seq_deliver_single_event.constprop.0+0x403/0x500 [ 273.698986][ T8564] snd_seq_deliver_event+0x2eb/0x4b0 [ 273.704257][ T8564] snd_seq_dispatch_event+0x9d/0x300 [ 273.709525][ T8564] snd_seq_check_queue+0xf1/0x250 [ 273.714535][ T8564] snd_seq_timer_interrupt+0x222/0x260 [ 273.719975][ T8564] snd_timer_process_callbacks+0x1eb/0x230 [ 273.725760][ T8564] snd_timer_interrupt+0x488/0x950 [ 273.730854][ T8564] snd_hrtimer_callback+0x188/0x250 [ 273.736051][ T8564] __hrtimer_run_queues+0x271/0x600 [ 273.741230][ T8564] hrtimer_interrupt+0x226/0x490 [ 273.746162][ T8564] smp_apic_timer_interrupt+0xd8/0x270 [ 273.751609][ T8564] apic_timer_interrupt+0xf/0x20 [ 273.756531][ T8564] native_safe_halt+0xe/0x10 [ 273.761106][ T8564] default_idle+0x21/0x170 [ 273.765503][ T8564] do_idle+0x1b7/0x290 [ 273.769550][ T8564] cpu_startup_entry+0x14/0x20 [ 273.774299][ T8564] rest_init+0xe4/0xeb [ 273.778373][ T8564] arch_call_rest_init+0x13/0x2b [ 273.783296][ T8564] start_kernel+0x82d/0x852 [ 273.787783][ T8564] secondary_startup_64+0xa4/0xb0 [ 273.792781][ T8564] [ 273.795091][ T8564] read to 0xffff8881227798a4 of 1 bytes by task 8564 on cpu 1: [ 273.802629][ T8564] snd_seq_check_queue+0x67/0x250 [ 273.807638][ T8564] snd_seq_enqueue_event+0x15a/0x2a0 [ 273.812907][ T8564] snd_seq_client_enqueue_event.constprop.0+0x187/0x2a0 [ 273.819848][ T8564] snd_seq_write+0x227/0x4e0 [ 273.824423][ T8564] __vfs_write+0x58/0xb0 [ 273.828733][ T8564] vfs_write+0x189/0x380 [ 273.832969][ T8564] ksys_write+0x16a/0x1a0 [ 273.837296][ T8564] __x64_sys_write+0x49/0x60 [ 273.841868][ T8564] do_syscall_64+0xc7/0x3b0 [ 273.846355][ T8564] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 273.852237][ T8564] [ 273.854541][ T8564] Reported by Kernel Concurrency Sanitizer on: [ 273.860690][ T8564] CPU: 1 PID: 8564 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 273.869249][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.879285][ T8564] ================================================================== [ 273.887422][ T8564] Kernel panic - not syncing: panic_on_warn set ... [ 273.893992][ T8564] CPU: 1 PID: 8564 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 273.902550][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.912586][ T8564] Call Trace: [ 273.915889][ T8564] dump_stack+0x11d/0x187 [ 273.920202][ T8564] panic+0x210/0x640 [ 273.924079][ T8564] ? vprintk_func+0x89/0x13a [ 273.928673][ T8564] kcsan_report.cold+0xc/0x1a [ 273.933336][ T8564] kcsan_setup_watchpoint+0x3fb/0x440 [ 273.938695][ T8564] snd_seq_check_queue+0x67/0x250 [ 273.943708][ T8564] snd_seq_enqueue_event+0x15a/0x2a0 [ 273.948982][ T8564] ? queueptr+0x84/0x90 [ 273.953126][ T8564] snd_seq_client_enqueue_event.constprop.0+0x187/0x2a0 [ 273.960046][ T8564] snd_seq_write+0x227/0x4e0 [ 273.964659][ T8564] ? snd_seq_kernel_client_enqueue+0x160/0x160 [ 273.970794][ T8564] __vfs_write+0x58/0xb0 [ 273.975018][ T8564] vfs_write+0x189/0x380 [ 273.979261][ T8564] ksys_write+0x16a/0x1a0 [ 273.983576][ T8564] __x64_sys_write+0x49/0x60 [ 273.988153][ T8564] do_syscall_64+0xc7/0x3b0 [ 273.992663][ T8564] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 273.998544][ T8564] RIP: 0033:0x45c829 [ 274.002426][ T8564] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.022015][ T8564] RSP: 002b:00007f37749f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.030415][ T8564] RAX: ffffffffffffffda RBX: 000000000050cc40 RCX: 000000000045c829 [ 274.038379][ T8564] RDX: 00000000fffffee4 RSI: 00000000200000c0 RDI: 0000000000000003 [ 274.046354][ T8564] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.054318][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 274.062274][ T8564] R13: 0000000000000d06 R14: 00000000004cf35a R15: 00007f37749f46d4 [ 275.178158][ T8564] Shutting down cpus with NMI [ 275.184316][ T8564] Kernel Offset: disabled [ 275.188687][ T8564] Rebooting in 86400 seconds..